AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2026:1782809708)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782809708 advisory. - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

Rocky Linux 8.6 [CIQ] Security Update: cloud-init (ciqsa-2026_0018)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260018 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2025:1765382050)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765382050 advisory. - A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the syste...

CLEANSTART-2024-OZ46983 When instructing cloud-init to set a random password for a new user account, versions before 21

Security vulnerability affects the cloud-init package. When instructing cloud-init to set a random password for a new user account, versions before 21...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760018787)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760018787 advisory. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1779101894)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779101894 advisory. - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init wh...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778756042)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778756042 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

Oracle Linux 8 : postgresql:12 (ELSA-2026-72274)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72274 advisory. - add postgresql-CVE-2026-18408.patch - apply backport-of-the-patch-to-fix-CVE-2025-8714.patch - Resolves: CVE-2026-14662, CVE-2026-14664,...

Rocky Linux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778493745)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778493745 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1788870088)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788870088 advisory. - A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious...

cve-2026-41042

CVE-2026-41042: Apache Gravitino --metalake NAME --cmd CMD --port PORT オプション| デフォルト| 説明 ---|---|--- target| （必須）| Gravitino サーバー（例：http://127.0.0.1:8090） --metala...

OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

EPScalate

EPScalate QuickHealのSeqrite Enterprise Endpoint Security Solution EPSにおける特権昇格の脆弱性。この脆弱性にはCVE-2023-31497が割り当てられています。 https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 ベンダーと製品詳細 ベンダー : Quick Heal Technologies Limited 製品 : Seqrite Endpoint Security...

CVE-2025-56819

CVE-2025-56819 Datart v.1.0.0-rc.3 に問題があり、リモート攻撃者が INIT 接続パラメータを介して任意のコードを実行できます。 POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type": "JDBC", "properties": "dbType": "H2", "url":...

CVE-2025-24132-Scanner

EN | KR 📄 概要 このツールは、mDNS（Zeroconf）を介してローカルネットワーク上のAirPlay対応デバイスを検出し、CVE-2025-24132 “ゼロクリック” HTTP RCE脆弱性がないかテストします。検出されたデバイスはシンプルなGUIに一覧表示され、デバイスをクリックすると取得したすべてのプロパティを表示できます。 前提条件 Python 3.7+ PyQt5 zeroconf パッケージ（pip install zeroconf） インストール pip install PyQt5 zeroconf または pip install -r...

CVE-2026-97935

The Linux kernel contains a slab-use-after-free vulnerability in the tracing subsystem. The issue occurs because hist_register_trigger() adds a histogram trigger to the global named_triggers list before validating the trace clock. If the clock string is unknown, tracing_set_clock() fails, causing...

CVE-2026-97572

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...

PT-2026-98753

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs module where the btrfs init new device function switches latest dev and potentially s bdev from the seed device to a new sprout device before the first...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

PT-2026-97936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the aml spisg clk init function where the clk init data structure is not fully initialized. While the function populates init.parent data, it leaves init.parent names...