PT-2026-20492

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.13 and earlier Description An allowlist bypass exists in the OpenClaw npm package. This flaw causes a mismatch between the commands that are verified and the commands that are actually executed, potentially leading to...

python315-3.15.0~a3-4.1 on GA media (moderate)

python315-3.15.0a3-4.1 on GA media Announcement ID: openSUSE-SU-2026:10152-1 Rating: moderate Cross-References: CVE-2025-12781 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2026-0865 CVSS scores: CVE-2025-12781 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-12781 SUSE : 2...

CLSA-2026-1770115899 java-17-openjdk: Fix of 5 CVEs

Update to jdk-17.0.18+8 GA - CVE-2026-21925: improve JMX connections - CVE-2026-21933: improve HttpServer Request handling - CVE-2026-21945: enhance Certificate Checking - CVE-2025-64720: libpng: fix buffer overflow - CVE-2025-65018: libpng: fix heap buffer overflow...

Security update for ImageMagick (important)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20118-1 Rating: important References: bsc1254435 bsc1254820 bsc1255821 bsc1255822 bsc1255823 Cross-References: CVE-2025-65955 CVE-2025-66628...

MiracleLinux 9 : kernel-5.14.0-611.24.1.el9_7 (AXSA:2026-117:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-117:06 advisory. kernel: drm/xe: Make dma-fences compliant with the safe access rules CVE-2025-38703 kernel: smb: client: let recvdone verify dataoffset, datalength a...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2018-14634link is external Linux Kernel Integer Overflow Vulnerability CVE-2025-52691link is external SmarterTools SmarterMail Unrestricted Upload of File with...

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1254451. CVE-2022-50490: bpf: Propagate error from htablockbucket to userspa...

MiracleLinux 8 : java-11-openjdk-11.0.23.0.9-3.el8 (AXSA:2024-7715:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7715:09 advisory. OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122...

MiracleLinux 7 : kernel-3.10.0-1160.36.2.el7 (AXSA:2021-2250:14)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2250:14 advisory. kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: use-after-free in net/bluetooth/hcievent.c when...

MiracleLinux 9 : qt5-5.15.9-1.el9 (AXSA:2023-6891:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6891:08 advisory. qt: buffer over-read via a crafted reply from a DNS server CVE-2023-33285 qt: allows remote attacker to bypass security restrictions caused by flaw ...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.101-2.6.6.1.0.1.el7.AXS7 (AXSA:2016-216:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-216:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-0686 RESERVED This candidate has been reserved by an organization ...

Security update for curl (moderate)

openSUSE security update: security update for curl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20031-1 Rating: moderate References: bsc1255731 bsc1255732 bsc1255733 bsc1255734 bsc1256105 Cross-References: CVE-2025-14017 CVE-2025-14524...

MiracleLinux 4 : krb5-1.9-33.AXS4.2 (AXSA:2012-836:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-836:04 advisory. Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of...

Security update for libpng16 (important)

openSUSE security update: security update for libpng16 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20017-1 Rating: important References: bsc1254157 bsc1254158 bsc1254159 bsc1254160 bsc1254480 Cross-References: CVE-2025-64505 CVE-2025-64506...

MiracleLinux 9 : galera and mariadb (AXSA:2025-11069:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11069:01 advisory. mysql: High Privilege Denial of Service Vulnerability in MySQL Server CVE-2025-21490 mariadb: MariaDB Server Crash Due to Empty Backtrace Log...

curl-8.18.0-1.1 on GA media (moderate)

curl-8.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10017-1 Rating: moderate Cross-References: CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224 CVSS scores: CVE-2025-14017 SUSE : 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2025-14017 SUSE : 7...

RockyLinux 9 : php:8.1 (RLSA-2023:2417)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2417 advisory. XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could be treated as a 'Host-' or 'Secure-' cooki...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0475-1 Rating: important References: 1254776 1255115 Cross-References: CVE-2025-14174 CVE-2025-14372 CVE-2025-14373 CVE-2025-14765 CVE-2025-14766 Affected Products: openSUSE Backports SLE-15-SP6 An update tha...

pgadmin4-9.11-1.1 on GA media (moderate)

pgadmin4-9.11-1.1 on GA media Announcement ID: openSUSE-SU-2025:15818-1 Rating: moderate Cross-References: CVE-2025-12762 CVE-2025-12763 CVE-2025-12764 CVE-2025-12765 CVE-2025-13780 CVSS scores: CVE-2025-12762 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L CVE-2025-12762 SUSE : 9.3...

Mozilla Thunderbird < 146.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 146.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-95 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR...