[SECURITY] [DLA 4715-1] kissfft security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4715-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 02, 2026 https://wiki.debian.org/LTS -...

GHSA-88FW-V6X4-3F58 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

[SECURITY] [DSA 6410-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6410-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2026 https://www.debian.org/security/faq -...

Fedora 44 : lemonldap-ng (2026-f9b48b47af)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f9b48b47af advisory. Update to 2.23.2 ---- Update to 2.23.1, fixes CVE-2026-12804 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : gh (2026-4e77362489)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e77362489 advisory. Update to 2.97.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : lemonldap-ng (2026-1f595e8eb4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1f595e8eb4 advisory. Update to 2.23.2 ---- Update to 2.23.1, fixes CVE-2026-12804 Tenable has extracted the preceding description block directly from the Fedora security...

Debian dla-4715 : kissfft-tools - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4715 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4715-1 [email protected]...

Fedora 43 : nextcloud (2026-51116fe081)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51116fe081 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Debian dsa-6410 : libssh-4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6410 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6410-1 [email protected] https://www.debian.org/securit...

RockyLinux 10 : kernel (RLSA-2026:49211)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49211 advisory. kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: isofs: validate Rock Ridge CE continuation extent...

GHSA-M4P7-R5RC-7G4J vulnerabilities

Vulnerabilities for packages: dbt-bigquery, airflow, openstack-keystone-2025.1, py3-cassandra-medusa, mlflow, authentik, superset, datahub-ingestion, wazuh-manager, localstack, wazuh-manager-fips, openstack-keystone-2025.2, authentik-fips, openstack-keystone-2026.1, apache-beam-python-3.12-sdk,...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zipkin, kserve-modelmesh, keycloak, celeborn, druid, neo4j, trino, opensearch, spark...

GHSA-32RQ-JHR7-M3HH Duplicate Advisory: Guzzle: Proxy-Authorization headers can be sent to origin servers

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-94pj-82f3-465w. This link is maintained to preserve external references. Original Description guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in...

GHSA-9WX3-P993-35VP Duplicate Advisory: Axios: Nested axios option objects can consume polluted prototype values

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7q8q-rj6j-mhjq. This link is maintained to preserve external references. Original Description axios before 0.33.0 and 1.x before 1.18.0 can consume inherited properties from nested request option objects when th...

GHSA-8VR5-263F-X5R3

creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d...

CGA-62C3-WHV3-CF3R

Bulletin has no description...

DEBIAN-CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

DEBIAN-CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...

CGA-8C7J-9MF2-F592

Bulletin has no description...

CVE-2026-67331 better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass

better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users' providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API...