CVE-2026-70373 Koha: SQL Injection in reports/issues_stats.pl

Koha's reports/issuesstats.pl the circulation statistics report builds its calculation query in sub calculate by concatenating several user-controlled request parameters directly into the SQL string. The PeriodTypeSel, PeriodDaySel, and PeriodMonthSel parameters are interpolated raw into...

CVE-2026-70371 Koha: SQL Injection in reports/issues_avg_stats.pl

Koha's reports/issuesavgstats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string. The Line and Column parameters are not validated against any whitelist and land verbatim in identifier positions SELECT DISTINCTROW, GRO...

Important: bind

Issue Overview: BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and...

OPENSUSE-SU-2026:11446-1 cockpit-repos-4.9-1.1 on GA media

These are all security issues fixed in the cockpit-repos-4.9-1.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 8 : kernel-rt (RLSA-2026:49213)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49213 advisory. kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master conntrack...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:3452-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3452-1 advisory. - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN...

OPENSUSE-SU-2026:11444-1 azure-storage-azcopy-10.32.6-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11449-1 gimp-3.2.4-3.1 on GA media

These are all security issues fixed in the gimp-3.2.4-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21519-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719: Site isolation issue in the DOM: Navigation component...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

frr10 security, bug fix, and enhancement update

10.4.3-3.2 - Resolves: RHEL-222338 - AVC when reading user's site-packages 10.4.3-3.1 - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232...

RHEL 9 : firefox (RHSA-2026:47104)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47104 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom:...

RHEL 9 : rhc (RHSA-2026:49509)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49509 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

OPENSUSE-SU-2026:11438-1 alloy-1.18.0-1.1 on GA media

These are all security issues fixed in the alloy-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: bind / bind-modules-bdbhpt / bind-modules-generic / etc (openSUSE-SU-2026:21489-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21489-1 advisory. This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982....

CVE-2026-10079

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...

PT-2026-66768

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated...

OPENSUSE-SU-2026:21489-1 Security update for bind

This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exit bsc1271983. - CVE-2026-11331: Potential wildcard CNAME RPZ policy...