Amazon Linux 2023 : brotli, brotli-devel, libbrotli (ALAS2023-2026-3334)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3334 advisory. A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code...

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-3278)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3278 advisory. ssl.SSLContext.wrapbio didn't require the serverhostname argumentto not be None if ssl.SSLContext.checkhostname was set. Due to amissing parameter check in SSLObject, if the serverhostname argumentisn'...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3260)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3260 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

CentOS Linux 7.9 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (ciqsa-2026_1717)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261717 advisory. This advisory aggregates security fixes for the php SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2026-109619, CVE-2026-109618. Tenable has...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792746902)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792746902 advisory. - This vulnerability affects Node.js 26.x, 24.x, and 22.x. Thank you, to hasanfleyah for reporting this vulnerability and thank you...

libvpx-devel-1.17.0-1.1 on GA media (moderate)

libvpx-devel-1.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12106-1 Rating: moderate Cross-References: CVE-2026-2447 CVSS scores: CVE-2026-2447 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-2447 SUSE : 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...

Rocky Linux 9.2 [CIQ] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-tools Multiple Vulnerabilities (ciqsa-2026_1652)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261652 advisory. This advisory aggregates security fixes for the openjpeg2 SRPM in CIQ LTS 9.2. It addresses 30 CVEs: CVE-2016-9580, CVE-2016-3182, CVE-2016-9573,...

Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261653 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2026-22801, CVE-2007-2445, CVE-2007-5269,...

AlmaLinux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.6:CLSA-2026:1792511364)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792511364 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not...

Rocky Linux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.6:CLSA-2026:1792511364)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792511364 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must n...

kernel-devel-7.2.9-1.1 on GA media (moderate)

kernel-devel-7.2.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:12074-1 Rating: moderate Cross-References: CVE-2026-100071 CVE-2026-100072 CVE-2026-100073 CVE-2026-100074 CVE-2026-100075 CVE-2026-100076 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-93086 CVE-2026-93089...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792414477)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792414477 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a cra...

openSUSE 16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (openSUSE-SU-2026:22102-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22102-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit m...

pgvector-devel-0.8.7-1.1 on GA media (moderate)

pgvector-devel-0.8.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:12067-1 Rating: moderate Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-103484 SUSE : 8.7...

PT-2026-117605

These are all security issues fixed in the freetype2-devel-2.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12179-1 freetype2-devel-2.15.0-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12165-1 kernel-devel-7.2.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-117129

These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-116431

These are all security issues fixed in the libXtst-devel-1.2.5-3.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4656-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4656-1 advisory. - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network ...