18035 matches found
Fedora 43 : perl-YAML-Syck (2026-c8484f1afb)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c8484f1afb advisory. This update addresses four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load path on untrusted input with no special flags:...
Fedora 44 : perl-DBI (2026-1c5ffc6018)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1c5ffc6018 advisory. 1.651 bump - Fix CVE-2026-15043, CVE-2026-15392, CVE-2026-60082 and CVE-2026-60081 Tenable has extracted the preceding description block directly fr...
Fedora 43 : perl-DBI (2026-c0abcba354)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0abcba354 advisory. 1.651 bump - Fix CVE-2026-15043, CVE-2026-15392, CVE-2026-60082 and CVE-2026-60081 Tenable has extracted the preceding description block directly fr...
libpq security update
13.23-3 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 13.23-2 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239...
CVE-2026-60082 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-60082 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-13089
OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...
OPENSUSE-SU-2026:21435-1 Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded character lookahead bsc1271637...
OPENSUSE-SU-2026:21437-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: - CVE-2026-64194: Fixed a Denial of Service via deep DNS compression pointer chains bsc1272214 - CVE-2026-64193: Fixed a remote execution injection bsc1272212...
CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify
OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...
OPENSUSE-SU-2026:21427-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate bsc1271705...
Vulnerabilities found in Oracle Communications
Oracle has identified vulnerabilities in its Communications products and underlying third-party software. There are a total of 213 vulnerabilities, of which 67 reside in Oracle products and 146 in third-party products that have already received updates. The most serious vulnerabilities, 12 in...
Vulnerabilities in Oracle database products
Oracle has identified 158 vulnerabilities in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQLDeveloper, and TimesTen In-Memory Database. Of these vulnerabilities, 91 originate from third-party products...
OPENSUSE-SU-2026:21412-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director bsc1271629. - CVE-2026-15043: DBI:SQL:Nano has incorrect predicate evaluation,...
ROOT-OS-DEBIAN-12-CVE-2026-48962 CVE-2026-48962 in rootio-perl - Patched by Root
Root has patched CVE-2026-48962 in the rootio-perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42497 CVE-2026-42497 in rootio-perl - Patched by Root
Root has patched CVE-2026-42497 in the rootio-perl package for Root:Debian:12. Multiple fixed versions available...