CVE-2025-62858 QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions:...

PT-2026-47793

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.12-1.1 Description An off-by-one error exists in the rockchip rkcif media component. The issue occurs due to incorrect comparisons using instead of = when accessing arrays, which can lead to accessing one...

Security update for elemental-register (important)

openSUSE security update: security update for elemental-register ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20920-1 Rating: important References: bsc1251679 bsc1260277 bsc1265921 bsc1266789 bsc1267168 bsc1267197 Cross-References: CVE-2026-33186...

OPENSUSE-SU-2026:10981-1 grafana-11.6.14+security04-2.1 on GA media

These are all security issues fixed in the grafana-11.6.14+security04-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10987-1 perl-Git-Repository-1.326.0-1.1 on GA media

These are all security issues fixed in the perl-Git-Repository-1.326.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for elemental-toolkit (important)

openSUSE security update: security update for elemental-toolkit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20921-1 Rating: important References: bsc1251679 bsc1260277 bsc1266187 bsc1267168 Cross-References: CVE-2026-33186 CVSS scores:...

OPENSUSE-SU-2026:10982-1 graphite2-1.3.15-1.1 on GA media

These are all security issues fixed in the graphite2-1.3.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10978-1 SDL3_sound-devel-3.2.0-1.1 on GA media

These are all security issues fixed in the SDL3sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10977-1 MozillaFirefox-151.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media

These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : Unbound -- Multiple vulnerabilities (72e5b334-6365-11f1-8c57-000af7b98cf6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 72e5b334-6365-11f1-8c57-000af7b98cf6 advisory. NLnet Labs reports: This release consolidates security fixes for issues reported over a period...

Fedora 43 : objfw (2026-d1580bc2d5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d1580bc2d5 advisory. Update to 1.5.5, containing many bug fixes, some also security related. Tenable has extracted the preceding description block directly from the Fedora securi...

PT-2026-48596

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description A heap buffer overflow occurs due to an integer overflow. A heap buffer overflow is a memory corruption issue where data is written beyond the boundaries of a buffer allocated on the heap,...

OPENSUSE-SU-2026:10980-1 flannel-0.28.5-1.1 on GA media

These are all security issues fixed in the flannel-0.28.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10989-1 python311-Django4-4.2.30-3.1 on GA media

These are all security issues fixed in the python311-Django4-4.2.30-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10979-1 agama-web-ui-21+360.16caae772-44.1 on GA media

These are all security issues fixed in the agama-web-ui-21+360.16caae772-44.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10985-1 libIex-3_4-33-3.4.12-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50305)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50305 advisory. - arm64: errata: Mitigate TLBI errata on various Arm CPUs Mark Rutland Orabug: 39017590 CVE-2025-10263 - net: skbuff: propagate shared-frag marker through...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an identity spoofing vulnerability (CVE-2026-8644)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an identity spoofing vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products and...

Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by a denial of service vulnerability (CVE-2026-4410)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by a denial of service vulnerability with the sipServlet-1.1 feature enabled. Vulnerability Details Refer to the security bulletins listed in...