RHSA-2026:0701 Red Hat Security Advisory: OpenShift Container Platform 4.17.47 packages and security update

Bulletin has no description...

CVE-2026-23950 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, vitess, renovate, redisinsight, wazuh-dashboard-fips, prism, code-server, drupal, kubeflow-katib, tileserver-gl, pnpm-stage0, gitlab-rails-ce, wazuh-dashboard, kubeflow-pipelines, graalvm, kubeflow-centraldashboard, tileserver-gl-fips,...

RockyLinux 10 : binutils (RLSA-2025:20155)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20155 advisory. binutils: GNU Binutils ld elflink.c elfgcsweep memory corruption CVE-2025-5244 Tenable has extracted the preceding description block directly from the RockyLinu...

Fedora 42 : rust-rkyv0.7 / rust-rkyv_derive0.7 (2026-801214adba)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-801214adba advisory. https://rustsec.org/advisories/RUSTSEC-2026-0001 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : rust-rkyv0.7 / rust-rkyv_derive0.7 (2026-35d1dee2ab)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-35d1dee2ab advisory. https://rustsec.org/advisories/RUSTSEC-2026-0001 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2025-71156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automaticall...

RockyLinux 10 : golang (RLSA-2026:0922)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0922 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descripti...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.11 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.11 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2025-47913)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47913 advisory. - SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause ear...

Azure Linux 3.0 Security Update: samba (CVE-2020-25717)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25717 advisory. - A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this...

Azure Linux 3.0 Security Update: samba (CVE-2017-15275)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-15275 advisory. - Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the...

Important: docker

Issue Overview: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. CVE-2025-47914 SSH servers parsing GSSAPI authentication requests do not validate the number...

Azure Linux 3.0 Security Update: fltk (CVE-2019-7317)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-7317 advisory. - pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called...

Fedora: Security Advisory (FEDORA-2026-e27b23af78)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +253 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)

lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: OSV:GHSA-XXJR-MMJV-4GPG...

GHSA-R92C-9C7F-3PJ8 OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may cause high CPU usage when encountering maliciously-crafted .zip archives for either provider or module distribution packages. Those who depend on modules or providers...

@backstage/backend-app-api (>=0.0.0-nightly-20220908030128, <=1.4.0-next.1), @backstage/backend-common (>=0.0.0-nightly-202153022114, <=0.0.0-nightly-20240618021721) +155 more potentially affected by CVE-2026-24047 via @backstage/cli-common (>=0.0.0-nightly-2021612205, <=0.1.16-next.2)

@backstage/cli-common NPM version =0.0.0-nightly-2021612205, =0.0.0-nightly-20220908030128, =0.0.0-nightly-202153022114, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20220908030128,...

@alithya-oss/backstage-plugin-scaffolder-backend-module-aws-apps (>=0.3.10, <=0.3.12), @alithya-oss/backstage-plugin-scaffolder-backend-module-aws-core (>=0.2.14, <=0.2.16) +142 more potentially affected by CVE-2026-24046 via @backstage/plugin-scaffolder-node (>=0.0.0-nightly-20240929023448, <=0.11.1-next.0)

@backstage/plugin-scaffolder-node NPM version =0.0.0-nightly-20240929023448, =0.3.10, =0.2.14, =0.3.6, =0.2.6, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.0, =0.4.0, =0.4.1 - @backstage-community/backstage-plugin-scaffolder-backend-module-mta 0.4.0 and more Source cves:...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +122 more potentially affected by CVE-2026-23957 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-23957 Source advisory:...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-embed/js (>=0.0.1, <=0.0.45) +323 more potentially affected by CVE-2026-23956 via seroval (>=0.2.1, <=1.3.2)

seroval NPM version =0.2.1, =0.2.5, =0.0.1, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =1.0.0, =0.1.26, =0.1.38 and more Source cves: CVE-2026-23956 Source advisory: OSV:GHSA-HX9M-JF43-8FFR...