SUSE CVE-2026-19548

Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...

SUSE CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

SUSE CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

SUSE CVE-2026-68157

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

SUSE CVE-2026-70456

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...

SUSE CVE-2026-70459

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a director...

Red Hat Security Advisory 2026-55757-03

Red Hat Security Advisory 2026-55757-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101976 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

PT-2026-77327

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A use after free issue in the Browser component on Mac allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to enti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101982 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101991 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101997 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55794)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55794 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

AlmaLinux 8 : 389-ds:1.4 (ALSA-2026:55530)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55530 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference in...

AlmaLinux 9 : 389-ds-base (ALSA-2026:55423)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55423 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference in...

AlmaLinux 9 : curl (ALSA-2026:55439)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55439 advisory. curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication CVE-2026-1965 curl: curl: Information disclosure via...

RHEL 9 : gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free (RHSA-2026:55865)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55865 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

RHEL 8 : haproxy (RHSA-2026:55861)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55861 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProx...

Fedora 46 : perl-CGI-Session (2026-f47e713a34)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f47e713a34 advisory. Automatic update for perl-CGI-Session-4.49-1.fc46. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...

Amazon Linux 2 : sg3_utils, --advisory ALAS2-2026-3860 (ALAS-2026-3860)

The version of sg3utils installed on the remote host is prior to 1.37-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3860 advisory. A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without...