Photon OS 5.0: Xz PHSA-2025-5.0-91-0496

An update of the xz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0496. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Krb5 PHSA-2025-5.0-92-0648

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the ceph_handle_auth_reply() function in the net/ceph/auth.c module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of...

The vulnerability of the smb2_calc_max_out_buf_len() function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability allows an attacker to compromise the...

Photon OS 5.0: Polkit PHSA-2025-5.0-91-0673

An update of the polkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0673. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Protobuf PHSA-2026-5.0-91-0849

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0849. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

agama-web-ui-23+75.1a877fb50-50.1 on GA media (moderate)

agama-web-ui-23+75.1a877fb50-50.1 on GA media Announcement ID: openSUSE-SU-2026:11472-1 Rating: moderate Cross-References: CVE-2026-13311 CVSS scores: CVE-2026-13311 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-13311 SUSE : 8.7...

The vulnerability in the `drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c` file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c file of the Broadcom wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

Photon OS 5.0: Openssl PHSA-2025-5.0-91-0480

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-76482

Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...

Photon OS 5.0: Kafka PHSA-2023-5.0-91-0013

An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh2 PHSA-2026-5.0-92-0912

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0912. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2026:11474-1 gitoxide-0.56.0-1.1 on GA media

These are all security issues fixed in the gitoxide-0.56.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11475-1 kak-lsp-21.0.2-1.1 on GA media

These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11483-1 zpaqfranz-64.8-1.1 on GA media

These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11477-1 librest-1_0-0-0.10.2-2.1 on GA media

These are all security issues fixed in the librest-10-0-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center

This High severity Cryptographic Failure vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-44092

A flaw was found in ModbusServer. An unauthenticated remote attacker can inject malicious input into the application due to a lack of input validation when fetching data from MQTT. This vulnerability may lead to a loss of data integrity and system availability...

CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

CVE-2026-67585

The CVE-2026-67585 entry concerns DivvyPayHQ absinthe_federation. An unauthenticated remote attacker can cause the Erlang VM to abort by crafting _entities representation keys. The root cause is that every key in representations is converted to an atom via String.to_atom/1, and since representati...