Medium: openssh

Issue Overview: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes...

thunderbird security update

140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...

thunderbird security update

140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...

kernel security, bug fix, and enhancement update

6.12.0-211.42.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Important: python3-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output CVE-2025-40158 In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit CVE-2026-43091 In the Linux kernel, the following...

Important: pipewire

Issue Overview: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker t...

Important: kernel-livepatch-6.18.25-57.109

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

Important: kernel-livepatch-6.12.94-123.174

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

KLA91188 OSI vulnerability in Mozilla Firefox

Information disclosure vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories MFSA2026-73 Exploitation CVE list CVE-2026-18809 high Solution Update to the latest version Download Mozilla Firefox Impacts OSI...

corepack24-24.18.1-1.1 on GA media (moderate)

corepack24-24.18.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11439-1 Rating: moderate Cross-References: CVE-2026-56846 CVE-2026-56847 CVE-2026-56848 CVE-2026-56850 CVE-2026-58039 CVE-2026-58040 CVE-2026-58041 CVE-2026-58042 CVE-2026-58043 CVE-2026-58044 CVE-2026-58045 CVSS scores:...

Security update for python-sh (important)

openSUSE security update: security update for python-sh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21516-1 Rating: important References: bsc1272424 Cross-References: CVE-2026-54552 CVSS scores: CVE-2026-54552 SUSE : 8.2...

golang-github-prometheus-prometheus-3.13.2-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.13.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11436-1 Rating: moderate Cross-References: CVE-2023-45289 CVE-2025-4673 CVE-2026-44990 CVE-2026-56852 CVSS scores: CVE-2023-45289 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2025-4673 SUSE...

Amazon Linux 2023 : cargo-c (ALAS2023-2026-2024)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2024 advisory. gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guar...

Fedora 44 : doctl (2026-7ca1b24b3c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7ca1b24b3c advisory. Update to 1.164.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

RockyLinux 8 : frr (RLSA-2026:49511)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49511 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the RockyLinu...

SUSE SLES15 Security Update : nginx (SUSE-SU-2026:3448-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3448-1 advisory. - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3458-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3458-1 advisory. This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code...

Low: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 Bug Fixes and Enhancements: Possible regression with FM350GL almalinux-9.8.z...

Fedora 45 : freeipa / samba (2026-3be8175017)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-3be8175017 advisory. Update to Samba 4.24.5 and rebuild of FreeIPA Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and...