137084 matches found
CLSA-2026-1788328472 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.1-tuxcare.1...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.8-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.8-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.8-0.1.hum1 noarch golang1.26-misc-1.26.8-0.1.hum1 noarch...
[slackware-security] pcre2
New pcre2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pcre2-10.48-i586-1.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when enabled v...
PT-2026-85165
These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85169
These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11674-1 glances-common-4.5.6-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.6-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-18924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in...
Linux Distros Unpatched Vulnerability : CVE-2026-16658
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Oracle Linux 9 : ELSA-2026-60304-0: / golang (ELSA-2026-603040)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603040 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246425 1.26.5-2 - Update t...
php:8.2 security, bug fix, and enhancement update
php 8.2.33-1 - rebase to 8.2.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 2.0.3-2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz1971065...
PT-2026-85166
These are all security issues fixed in the ffmpeg-7-7.1.5-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85177
These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85174
These are all security issues fixed in the opencode-1.18.26-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85168
These are all security issues fixed in the hauler-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85170
These are all security issues fixed in the helm3-3.21.3-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11670-1 mcphost-0.34.0-10.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed...
php security, bug fix, and enhancement update
8.3.33-1 - rebase to 8.3.33...
PT-2026-84824
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...