30880 matches found
OPENSUSE-SU-2026:11230-1 curl-8.21.0-1.1 on GA media
These are all security issues fixed in the curl-8.21.0-1.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 9 : gstreamer1-plugins-ugly-free (ELSA-2026-36674)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-36674 advisory. - Fix CVE-2026-53704: multiple rmdemux security issues Tenable has extracted the preceding description block directly from the Oracle Linux security...
OPENSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media
These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed...
AlmaLinux 10 : kernel (ALSA-2026:36541)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36541 advisory. kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43074 kernel: net: mana: Fix double destroyworkqueue on service rescan PCI...
RHEL 8 : httpd:2.4 (RHSA-2026:36846)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36846 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP...
Important: Red Hat Security Advisory: httpd:2.4 security update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...
OPENSUSE-SU-2026:21277-1 Security update for go-sendxmpp
This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.16.0: Added: Add Ox support to http-upload. Add Ox support for private group chats. Show error cause if joining MUCs failedi requires go-xmpp = v0.3.5. Changed: Fix --ox-delete-nodes. Fix receiving of 1-...
CVE-2026-59879
Immutable.js List contains a 32-bit trie overflow in List.js setListBounds that, prior to versions 4.3.9 and 5.1.8, can mishandle an index or size in the 2^30–2^31 range, leading to an uncatchable infinite loop for empty Lists, unbounded allocation for populated Lists, or silent wrap of large set...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
SUSE-SU-2026:2799-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions bsc1266290. - CVE-2025-40216: iouring/rsrc: don't rely on user vaddr alignment bsc1259764. - CVE-2025-40341:...
SUSE-SU-2026:22582-1 Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409. - CVE-2026-8927: env-set cross-proxy Digest auth state leak...
SUSE-SU-2026:22705-1 Security update for jq
This update for jq fixes the following issues Security issues fixed: - CVE-2025-9403: reacheable assertion in runjqtests can lead to program termination when processing malformed JSON input containing invalid Unicode escape sequences bsc1248600. - CVE-2026-32316: integer overflow within the...
PT-2026-56859
Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.10 OpenEXR versions prior to 3.3.12 OpenEXR versions prior to 3.4.13 Description An infinite-loop issue exists in SampleCountChannel due to the roundListSizeUp function. This function rounds a sample-list size to...
PT-2026-56845
Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23-4.2.0-1.1 and libeverest-3.6.7-1.1 packages on the GA media of openSU...
PT-2026-56531
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5 Description A diagnostic action on the LDAP Source API fails to enforce the object-level read-authorization filter applied to the rest of the API. This allows any party...
gstreamer1-plugins-ugly-free security update
1.22.12-6.1 - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464...
PT-2026-56530
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5 Description In enterprise deployments using a Google Chrome Endpoint stage with mode set to REQUIRED or the deprecated Google Chrome Device Trust Connector stage, the...
OPENSUSE-SU-2026:11222-1 keylime-ima-policy-0.2.9+49-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.9+49-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-56532
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5 Description An inbound SAML Source configured with non-default USERNAME LINK or EMAIL LINK user-matching modes interprets XML comments within a NameID differently than t...