Oracle Linux 10 : python3.12 (ELSA-2026-10711)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-10711 advisory. - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167885, RHEL-168119 - Security fix for CVE-2026-4519 Resolves: RHEL-158127 Tenable h...

Fedora 42 : xrdp (2026-f04c228c78)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f04c228c78 advisory. Security fixes - CVE-2026-32105 - CVE-2026-32107 - CVE-2026-32623 - CVE-2026-32624 - CVE-2026-33145 - CVE-2026-33516 - CVE-2026-33689 - CVE-2026-355...

OPENSUSE-SU-2026:10632-1 dnsdist-2.0.5-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10637-1 java-17-openjdk-17.0.19.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10630-1 azure-storage-azcopy-10.32.2-2.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10649-1 sed-4.10-1.1 on GA media

These are all security issues fixed in the sed-4.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10644-1 prometheus-postgres_exporter-0.10.1-6.1 on GA media

These are all security issues fixed in the prometheus-postgresexporter-0.10.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10648-1 python315-3.15.0~a8-3.1 on GA media

These are all security issues fixed in the python315-3.15.0a8-3.1 package on the GA media of openSUSE Tumbleweed...

Stable Channel Update for Desktop

The Stable channel has been updated to 147.0.7727.137/138 for Windows/Mac and 147.0.7727.137 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Oracle Linux 9 : gdk-pixbuf2 (ELSA-2026-10708)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-10708 advisory. - Backport fixes for CVE-2026-5201 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

OPENSUSE-SU-2026:10641-1 libixml11-1.18.5-1.1 on GA media

These are all security issues fixed in the libixml11-1.18.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10639-1 java-25-openjdk-25.0.3.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10647-1 python310-3.10.20-6.1 on GA media

These are all security issues fixed in the python310-3.10.20-6.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.0-0.1.hum1 aarch64, x8664 expat-devel-2.8.0-0.1.hum1 aarch64, x8664 expat-static-2.8.0-0.1.hum1 aarch64, x8664 expat-2.8.0-0.1.hum1.src src...

JLSEC-2026-229 In addition to the `c_rehash` shell command injection identified in CVE-2022-1292, further...

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

JLSEC-2026-230 AES OCB fails to encrypt some bytes

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption...

Camel-MINA Vulnerable to Deserialization of Untrusted Data

The camel-mina component's MinaConverter.toObjectInputIoBuffer type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. When a Camel route uses camel-mina as a TCP or UDP consumer and requests conversion to ObjectInput f...

PT-2026-35887

Name of the Vulnerable Software and Affected Versions libixml11 versions prior to 1.18.5-1.1 Description Security issues were identified in the libixml11 library. Recommendations Update to version 1.18.5-1.1...