CLSA-2026-1792965070 TuxCare security update for esbuild-linux-s390x (1 CVE)

TuxCare rebuilt esbuild-linux-s390x to address 1 CVE. Fixed in 0.14.54-tuxcare.4...

CLSA-2026-1792965069 TuxCare security update for esbuild-linux-s390x (1 CVE)

TuxCare rebuilt esbuild-linux-s390x to address 1 CVE. Fixed in 0.15.18-tuxcare.4...

CLSA-2026-1792965066 TuxCare security update for esbuild-linux-s390x (1 CVE)

TuxCare rebuilt esbuild-linux-s390x to address 1 CVE. Fixed in 0.14.25-tuxcare.2...

CLSA-2026-1792965068 TuxCare security update for esbuild-linux-s390x (1 CVE)

TuxCare rebuilt esbuild-linux-s390x to address 1 CVE. Fixed in 0.15.5-tuxcare.4...

CLSA-2026-1792965067 TuxCare security update for esbuild-linux-s390x (1 CVE)

TuxCare rebuilt esbuild-linux-s390x to address 1 CVE. Fixed in 0.14.22-tuxcare.2...

CLSA-2026-1792162029 TuxCare security update for @esbuild/linux-s390x (1 CVE)

TuxCare rebuilt @esbuild/linux-s390x to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

CLSA-2026-1792161073 TuxCare security update for @rollup/rollup-linux-s390x-gnu (1 CVE)

TuxCare rebuilt @rollup/rollup-linux-s390x-gnu to address 1 CVE. Fixed in 4.22.4-tuxcare.1...

PT-2026-123735

TuxCare rebuilt @rollup/rollup-linux-s390x-gnu to address 1 CVE. Fixed in 4.22.4-tuxcare.1...

PT-2026-124493

TuxCare rebuilt @esbuild/linux-s390x to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-90211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to...

CVE-2026-90211

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution bsc1269490. CVE-2026-12706: heap use-after-free read in the RASC video decoder can lead to denial of...

openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21520-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21520-1 advisory. - CVE-2026-45793: Github Actions issued GITHUBTOKEN disclosure in GitHub Actions logs bsc1271504. - CVE-2026-59946: path traversal in package bi...

OPENSUSE-SU-2026:21520-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued GITHUBTOKEN disclosure in GitHub Actions logs bsc1271504. - CVE-2026-59946: path traversal in package bin field lets dependencies chmod arbitrary host files bsc1271151. - CVE-2026-59947: URL-embedded...

Security update for liboqs, oqs-provider

This update for liboqs, oqs-provider fixes the following issues: disable KEMHQC and SIGMQOM and KEMNTRUPRIME on s390x for now, testsuite shows them not working. Updated to 0.16.0: Deprecation notice: SPHINCS+ was removed in 0.16.0. Security issues: Fixed uninitialized encapsderand pointer...

Oracle Linux 10 : golang (ELSA-2026-29980)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29980 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1 1.25.5-1 -...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1 1.25.5-1 - Update to Go 1.25.5 fips-1 1.25.3-5 - gating.yaml: Add tier1 s390x tests 1.25.3-4 - Cleanup lib/ ownership - Remove legacy logic forcing lib/...

golang security update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1 1.25.5-1 - Update to Go 1.25.5 fips-1 1.25.3-5 - gating.yaml: Add tier1 s390x tests 1.25.3-4 - Cleanup lib/ ownership - Remove legacy logic forcing lib/...

CVE-2026-53110

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the s390x architecture. The system's Application Binary Interface ABI requires that unsigned arguments and return values be zero-extended. However, the BPF JIT compiler incorrectly performed only sign...

CVE-2026-53110

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend...