Linux Distros Unpatched Vulnerability : CVE-2026-73149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length CVE-2026-73149 Note that Nessus reli...

ROOT-OS-UBUNTU-2204-CVE-2025-27613 CVE-2025-27613 in git - Patched by Root

Root has patched CVE-2025-27613 in the git package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-46835 CVE-2025-46835 in git - Patched by Root

Root has patched CVE-2025-46835 in the git package for Root:Ubuntu:22.04. Multiple fixed versions available...

GHSA-8QCX-XF44-272X vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

DEBIAN-CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...

Security update for gd

This update for gd fixes the following issue: CVE-2026-9672: security issues in libgd bsc1273101. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...

CLSA-2026-1786379889 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.4.2-tuxcare.1...

Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issue: Fixed an issue where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

CLSA-2026-1786379530 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.2-tuxcare.1...

CVE-2026-48048 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CLSA-2026-1786373314 TuxCare security update for fast-xml-parser (1 CVE)

TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

MINI-26C5-JCFV-9RRQ

Bulletin has no description...

MINI-JR6W-Q5HV-467G

Bulletin has no description...

MINI-3W5P-C8Q9-H95G

Bulletin has no description...

MINI-Q9R7-H6VR-C965

Bulletin has no description...

DEBIAN-CVE-2026-68284

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcpbpfsendmsg tcpbpfsendmsg keeps msgtx across skstreamwaitmemory, which drops and reacquires the socket lock. Its error path tries to decide whether msgtx names the local temporary messag...