SUSE SLED15 / SLES15 Security Update : python-python-engineio (SUSE-SU-2026:3085-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3085-1 advisory. - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through t...

Fedora 43 : chromium (2026-32e3e23696)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32e3e23696 advisory. Update to 150.0.7871.124 CVE-2026-15764: Use after free in Ozone CVE-2026-15765: Use after free in Ozone CVE-2026-15766: Uninitialized Use in Skia...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

health.matchbox:matchbox-engine (>=4.1.8, <=4.1.10), org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=2.2.7, <=2.2.8) +2 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.7, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.9.7, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.dstu3.support (>=6.9.5, <=6.9.8) +5 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version =6.9.5, =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.10.0-alpha1), org.finos.legend.engine:legend-engine-xt-relationalstore-aurora-execution (>=4.128.0, <=5.0.3) +3 more potentially affected by CVE-2026-11400 via software.amazon.jdbc:aws-advanced-jdbc-wrapper (>=3.2.0, <=4.0.0)

software.amazon.jdbc:aws-advanced-jdbc-wrapper MAVEN version =3.2.0, =8.9.0-alpha5-rc1, =4.128.0, =5.0.3 - org.wildfly:wildfly-datasources-galleon-pack 11.4.0.final - org.wildfly:wildfly-datasources-galleon-pack-common 11.4.0.final - org.wildfly:wildfly-datasources-preview-galleon-pack 11.4.0.fin...

io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.10.0-alpha1), org.finos.legend.engine:legend-engine-xt-relationalstore-aurora-execution (>=4.128.0, <=5.0.3) +3 more potentially affected by CVE-2026-11400 via software.amazon.jdbc:aws-advanced-jdbc-wrapper (>=3.2.0, <=4.0.0)

software.amazon.jdbc:aws-advanced-jdbc-wrapper MAVEN version =3.2.0, =8.9.0-alpha5-rc1, =4.128.0, =5.0.3 - org.wildfly:wildfly-datasources-galleon-pack 11.4.0.final - org.wildfly:wildfly-datasources-galleon-pack-common 11.4.0.final - org.wildfly:wildfly-datasources-preview-galleon-pack 11.4.0.fin...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +357 more potentially affected by CVE-2026-53712 via com.ongres.scram:scram-client (>=3.1, <=3.2)

com.ongres.scram:scram-client MAVEN version =3.1, =0.1.25, =1.5.0, =1.5.0, =0.3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.5.0 and more Source cves: CVE-2026-53712 Source advisory: MEND:CVE-2026-53712...

CVE-2026-63308

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

EUVD-2026-45213

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

CVE-2026-63308 Helm Files.Lines Denial of Service via Empty Chart Files

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

EUVD-2026-45061

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-63308: Improper Validation of Array Index

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...