RHSA-2026:61256 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

CLSA-2026-1788170175 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post15+tuxcare...

CLSA-2026-1788167387 TuxCare security update for scss-tokenizer (1 CVE)

TuxCare rebuilt scss-tokenizer to address 1 CVE. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1788167080 TuxCare security update for django (5 CVEs)

TuxCare rebuilt django to address 5 CVEs. Fixed in 4.2.post9+tuxcare...

CLSA-2026-1788165805 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.13...

OPENSUSE-SU-2026:20020-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 boo1256067: CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 stable released 2025-12-18 no cve listed yet Chromium 143.0.7499.146 boo1255115: CVE-2025-14765:...

ROOT-OS-DEBIAN-11-CVE-2026-34982 CVE-2026-34982 in vim - Patched by Root

Root has patched CVE-2026-34982 in the vim package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-82681

ash-project ash_admin (Elixir admin panel) contains a query-parameter injection in the Table, DataTable, and Show components. Row-action URLs were built via raw string interpolation of the primary key without URL-encoding. Because the primary key is spliced last into the query string and Plug.Con...

PT-2026-89531

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 4.0.1-tuxcare.1...

Fedora 43 : apache-ivy (2026-d0535bed52)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0535bed52 advisory. IMPROVEMENT: ivy:retrieve and the 'post resolve tasks' now support the override child element. IVY-1664 IMPROVEMENT: ivy:makepom will now add override elemen...

Fedora 43 : kernel (2026-f04e0d4d9d)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f04e0d4d9d advisory. The 7.1.12 stable kernel update contains a single fix for CVE-2026-80590. ---- The 7.1.11 stable kernel updates contain a number of important fixes across th...

OPENSUSE-SU-2026:11650-1 gopass-1.17.0-1.1 on GA media

These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246426...

Linux Distros Unpatched Vulnerability : CVE-2026-81495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81495 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Fedora 44 : apache-ivy (2026-c02768c662)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c02768c662 advisory. IMPROVEMENT: ivy:retrieve and the 'post resolve tasks' now support the override child element. IVY-1664 IMPROVEMENT: ivy:makepom will now add override elemen...

OPENSUSE-SU-2026:11651-1 incus-7.4-1.1 on GA media

These are all security issues fixed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-81497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81497 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

UBUNTU-CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

Linux Distros Unpatched Vulnerability : CVE-2026-61406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-15264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unity Link Advisory UTSA-2026-124429 CVE-2026-15264 CVE-2026-15264 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEV...