CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...

Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - thrift

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Important: Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - thrift

AIPCC Security Alerts identified CVEs in the 3.4 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

ROOT-APP-PYPI-CVE-2026-28802 CVE-2026-28802 in Authlib - Patched by Root

Root has patched CVE-2026-28802 in the Authlib package for Root:PyPI. Multiple fixed versions available...

RHSA-2026:49527 Red Hat Security Advisory: frr security, bug fix, and enhancement update

Bulletin has no description...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: mingw-glib2 security update

An update for mingw-glib2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Fedora 44 : python-nh3 / rust-ammonia (2026-61f0d68398)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-61f0d68398 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...

Unbreakable Enterprise kernel security update

5.4.17-2136.358.2 - xfs: resample the data fork mapping after cycling ILOCK Darrick J. Wong Orabug: 39776792 CVE-2026-64600 - net: Work around Marvell NIC TX stalls Venkat Venkatsubra Orabug: 39765820 5.4.17-2136.358.1 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo...

OPENSUSE-SU-2026:11440-1 nodejs26-26.5.1-1.1 on GA media

These are all security issues fixed in the nodejs26-26.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11439-1 corepack24-24.18.1-1.1 on GA media

These are all security issues fixed in the corepack24-24.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11441-1 xen-4.22.0_02-1.1 on GA media

These are all security issues fixed in the xen-4.22.002-1.1 package on the GA media of openSUSE Tumbleweed...

kernel security update

4.18.0-553.150.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

OPENSUSE-SU-2026:11436-1 golang-github-prometheus-prometheus-3.13.2-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11433-1 ImageMagick-7.1.2.28-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.28-2.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 10 : kernel (ALSA-2026:47017)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47017 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 kernel: tipc...

OPENSUSE-SU-2026:11435-1 gd-2.3.3-5.1 on GA media

These are all security issues fixed in the gd-2.3.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11434-1 chromedriver-151.0.7922.71-1.1 on GA media

These are all security issues fixed in the chromedriver-151.0.7922.71-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : xen (2026-bf1da84dfc)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bf1da84dfc advisory. update to xen 4.21.2 includes security fixes x86 shadow paging is deprecated XSA-495, CVE-2026-42493 vIRQ event channel binding may break Xenstore...