ROS-20260923-73-0074

The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which is part of the Linux kernel’s block-level support, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260923-73-0087

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0078

The vulnerability of the docsum function in the arch/arm64/lib/csum.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260923-73-0048

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0056

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-95336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Transactions Platform. CVE-2026-95336 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 ...

Linux Distros Unpatched Vulnerability : CVE-2026-91736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

ROS-20260923-73-0014

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a remote attacker to...

ROS-20260923-73-0022

The vulnerability of the atomispsparm function in the drivers/staging/media/atomisp/pci/atomispioctl.c driver for Intel Atom-based Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

containernetworking-plugins security update

1:1.9.0-4 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374...

CVE-2026-93402

mdtls discards the peer-identity verification result...

postgresql16 security update

16.15-1.0.1 - Replace upstream reference Orabug: 37044148 16.15-1 - Update to 16.15...

postgresql:15 security update

pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related: 212841...

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.15-1 - Update to 16.15 - Fix...

postgresql:12 security update

12.22-10.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679 - Resolves: CVE-2026-14680, CVE-2026-1574...

libX11-6-1.8.13-2.1 on GA media (moderate)

libX11-6-1.8.13-2.1 on GA media Announcement ID: openSUSE-SU-2026:11833-1 Rating: moderate Cross-References: CVE-2026-88806 CVSS scores: CVE-2026-88806 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-88806 SUSE : 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

unbound security update

1.16.2-5.14.2 - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 1.16.2-5.14.1 - Fix CVE-2026-50252 cache poisoning via source port prediction...

apr-util security update

1.6.1-9.1 - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 - Resolves: RHEL-236267 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 - Resolves...

Linux Distros Unpatched Vulnerability : CVE-2026-91725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium...

ROS-20260923-73-0035

The vulnerability of the copytoiter function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...