Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-54901

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Parser in usual mode does not mark arrayclass and hashclass references during garbage collection, leading to Use-After-Free. If GC runs after the class is assigned but before a parse,...

AlmaLinux 8 : kernel (ALSA-2026:33743)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33743 advisory. kernel: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 kernel: gfs2: Fix use-after-free in iomap inline data write pat...

Joern 4.0.570

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Rise from the Ashes: LLM-Based Static Analysis for Deep Learning Framework Bugs

Deep learning DL frameworks are critical AI infrastructures that often hide bugs with serious security implications. While dynamic approaches such as fuzzing are effective in uncovering these bugs, they require real test execution and incur high computational costs. Static analysis is a natural...

Linux Distros Unpatched Vulnerability : CVE-2026-13857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gesture...

PT-2026-54925

Name of the Vulnerable Software and Affected Versions FatFs versions R0.16 and earlier Description A divide-by-zero issue exists in the exFAT sync logic. This occurs during write or sync operations when crafted metadata causes the calculation n fatent - 2 to result in zero. Divide-by-zero is a...

PT-2026-54924

Name of the Vulnerable Software and Affected Versions FatFS versions R0.16 and earlier Description An integer overflow occurs in the mount volume function during FAT32 processing when the operation fasize = fs-n fats wraps. This allows an attacker to control file-size metadata, resulting in unsaf...

openSUSE 16 Security Update : python-tornado6 (openSUSE-SU-2026:21067-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21067-1 advisory. This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in...

RHEL 8 / 9 : Satellite 6.16.10 Async Update (Important) (RHSA-2026:34367)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34367 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessi...

PT-2026-54814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the rustc compiler causes the -Cforce-unwind-tables=y flag to emit the uwtable annotation only for functions and not for the module. Consequently, compiler-generated functions,...

PT-2026-55564

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could se...

container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...

RHEL 9 : Satellite 6.18.7 Async Update (Important) (RHSA-2026:34368)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34368 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

PT-2026-55218

Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.0.10 Description A race condition exists in the ShareHandler when processing share-link redemptions. The system reads the DownloadLimit of a share token using a read lock, releases it to serve the file, and only then...

Google Chrome < 150.0.7871.46 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop0175352312 advisory. - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed...

Fedora 44 : transmission (2026-0c067e5040)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c067e5040 advisory. Fixed a CORS bug that leaked the anti-CSRF nonce. 8938 Fixed a use-after-free bug in peer code. 8921 Fixed build error when compiling with fmt 12.2.0. 8942...

Fedora 43 : transmission (2026-0ed2011b62)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0ed2011b62 advisory. Fixed a CORS bug that leaked the anti-CSRF nonce. 8938 Fixed a use-after-free bug in peer code. 8921 Fixed build error when compiling with fmt 12.2.0. 8942...

Linux kernel Virtio Net Buffer Overflow DoS

The vulnerability of the virtnetfreezedown and virtnetrestoreup functions in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected...