SUSE SLED15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3648-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3648-1 advisory. - Regression in http.cookies bsc1263083. Tenable has extracted the preceding description block directly from t...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:3651-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3651-1 advisory. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713. Tenable has extract...

ROS-20260821-73-0015

The vulnerability in the arch/powerpc/kernel/rtasflash.c module of the Linux operating system is related to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0012

The vulnerability of the functions rtw89coreregisterhw and rtw89pciprobe in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can...

PT-2026-79347

XML Injection vulnerability in joshnuss xml builder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for...

php:8.2 security, bug fix, and enhancement update

libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...

ROS-20260821-73-0067

The vulnerability in the drivers/infiniband/core/cma.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260821-73-0031

The vulnerability of the Linux kernel Bluetooth HCI driver implementation relates to competitive access to resources during the execution of the sniffmin,maxintervalset function in the net/bluetooth/hcidebugfs.c module. Exploiting this vulnerability allows a remote attacker to compromise the...

ROS-20260821-73-0021

The vulnerabilities of the functions preparethresholdblock, amdthresholdinterrupt, and mcethresholdcreatedevice in the arch/x86/kernel/cpu/mce/amd.c module are related to integer overflow or cyclic shift vulnerabilities in the Linux operating system’s x86 kernel support. Exploitation of these...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0018

The vulnerability of the cxlparsecfmws function in the drivers/cxl/acpi.c module of the CXL device driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260821-73-0019

The vulnerability of the lastcmdset function in the kernel/trace/traceeventssynth.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...

ROS-20260821-73-0072

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

ROS-20260821-73-0044

The vulnerability in the drivers/clk/tegra/clk-tegra124-emc.c module of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0039

The vulnerability in the drivers/infiniband/hw/hfi1/chip.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

openSUSE 16 Security Update : go1.26 (openSUSE-SU-2026:21593-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21593-1 advisory. Update to go1.26.6 released 2026-08-13, bsc1255111. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead ...

Oracle Linux 8 : php:8.2 (ELSA-2026-57574)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57574 advisory. libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu...

RockyLinux 8 : php:8.2 (RLSA-2026:57574)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57574 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...