ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...

ROS-20260821-73-0072

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0044

The vulnerability in the drivers/clk/tegra/clk-tegra124-emc.c module of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0067

The vulnerability in the drivers/infiniband/core/cma.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

php:8.3 security, bug fix, and enhancement update

php 8.3.33-1 - rebase to 8.3.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...

CVE-2026-15743

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark r...

SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:3654-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3654-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001491 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilcnetdevcleanup...

PT-2026-79475

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...

PT-2026-79348

XML Injection vulnerability in joshnuss xml builder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102039)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102039 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with...

RHEL 9 : mod_md (RHSA-2026:57844)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57844 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102061 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability Why A null pointer dereference...

PT-2026-79329

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099437 advisory. Stack buffer overflow in PostgreSQL module refint allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A...

kernel security, bug fix, and enhancement update

4.18.0-553.157.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:3649-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3649-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. -...

openSUSE 16: libpython3_13-1_0 / libpython3_13-1_0-x86-64-v3 / libpython3_13t1_0 / etc (openSUSE-SU-2026:21595-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21595-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters...

ROS-20260821-73-0009

The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux operating system’s kernel, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...