CLSA-2026-1786361708 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 40 io.netty packages to address 1 CVE. Fixed in 4.1.49.Final-tuxcare.2...

Security update for gd

This update for gd fixes the following issue: CVE-2026-9672: security issues in libgd bsc1273101. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

CLSA-2026-1786355016 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 6 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.3-tuxcare.1...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Initializes the bytes read by the event handler. IPMB does not use i2c reads, but the handler needs to set a value. Otherwise, an i2c read will return an uninitialized value from the bus driver...

OPENSUSE-SU-2026:11489-1 java-25-openj9-25.0.4.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11490-1 libpcp-devel-6.3.8-3.1 on GA media

These are all security issues fixed in the libpcp-devel-6.3.8-3.1 package on the GA media of openSUSE Tumbleweed...

Photon OS 5.0: Openjdk21 PHSA-2025-5.0-91-0600

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0600. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0926

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-5.0-92-0948

Updates of 'samba-client' packages of Photon OS have been released...

Photon OS 5.0: Netkit PHSA-2025-5.0-91-0666

An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0666. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mysql PHSA-2026-5.0-92-0940

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0940. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

Spring Cloud Gateway Code Injection

Applications using Spring Cloud Gateway prior to 3.1.1+ and 3.0.7+ are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote...

EUVD-2026-54918

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...

CVE-2026-19350 Dolibarr ERP TakePOS invoice.php fail authorization

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...

EulerOS 2.0 SP11 : libssh2 (EulerOS-SA-2026-3080)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

CVE-2026-19244 HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

go-git: Malicious reference names may modify files outside the reference storage

Impact A path traversal issue in go-git could allow malicious reference names to access files outside the repository's intended reference storage. Loose references are stored under .git/. The reference name was previously used as a path without verifying that the resolved path remained within the...