New-lib3mf.dll-for-MeshMixer

Nouvelle lib3mf.dll pour MeshMixer lib3mf.dll précompilée pour MeshMixer qui inclut un correctif rétroporté pour CVE-2021-21772, et une version mise à jour de zlib 1.3.1. Remplacez votre fichier original à C:\Program Files\Autodesk\Meshmixer\ Code source inclus, si vous souhaitez le compiler...

salt-security-backports

Les correctifs officiels pour les versions précédentes peuvent être demandés à l'adresse : https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Les correctifs ici sont personnalisés et peuvent différer des correctifs officiels ⚠ Correctifs de sécurité rétroportés pour les versions non...

CVE-2025-12543-Fix-for-Wildfly

Image de base WildFly 11.0.0.Final — Correctif CVE-2025-12543 Présentation Ce dépôt fournit une image Docker de base construite sur WildFly 11.0.0.Final avec un correctif rétroporté pour CVE-2025-12543 , une vulnérabilité critique de validation de l'en-tête Host dans Undertow. L'image est destiné...

CVE-2026-46242

CVE-2026-46242 poc et lpe complets Plage de noyau| Statut| Notes ---|---|--- 5.15.209 - 5.16| Touché| Validation introduite par commit rétroporté 6.1.175 - 6.2| Touché| Validation introduite par commit rétroporté 6.4 - 6.18.32| Touché| Bogue introduit dans la version principale 6.4 6.19 - 7.0.9|...

Fedora 44 : freerdp2 (2026-d91338eea8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91338eea8 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

USN-8700-1 mysql-8.0, mysql-8.4 vulnerabilities

Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.11 in Ubuntu 26.04 LTS. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly...

Fedora 44 : libxls (2026-73af37bdd0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-73af37bdd0 advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...

Fedora 46 : libxls (2026-dabb47ed4a)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dabb47ed4a advisory. Automatic update for libxls-1.6.3-9.fc46. Changelog Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824...

CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

GHSA-C4C3-PG64-4M4V Mermaid configuration APIs allow prototype pollution

Summary Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge the caller-supplied configuration object into Mermaid's internal config using the assignWithDepth deep-merge helper that is vulnerable to prototype pollution. Because these APIs...

RHEL 9 : Backport fixes for CVE-2026-64835 and CVE-2026-58049 (Important) (RHSA-2026:51180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51180 advisory. CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-5804...

Exploit for CVE-2026-64560

CVE-2026-64560 — Linux Kernel posix-cpu-timers Non-leader exec...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

PackageKit security update

1.1.10-2.0.3 - Backport fix for CVE-2026-41651 Orabug: 39467887...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

libpq security update

13.23-3 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 13.23-2 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239...

Oracle Linux 10 : freerdp (ELSA-2026-19142)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19142 advisory. - Backport several CVE fixes CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700 Resolves: RHEL-186978, RHEL-186967,...

Fedora 43 : python-pillow (2026-fc2ded926e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc2ded926e advisory. Backport fixes for CVE-2026-59197 and CVE-2026-54058. ---- Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 Tenabl...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...