UBUNTU-CVE-2026-63894

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: serialize DMABUF cancel against request completion ffsepfiledmabufiocomplete calls usbepfreerequest on the completed request but leaves priv-req, the back-pointer that ffsdmabuftransfer set on submission, pointi...

Fedora 44 : gpsd (2026-36e3aa0593)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-36e3aa0593 advisory. Security fix for CVE-2026-58459 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0926

Updates of 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0926

Updates of 'linux', 'openssh', 'linux-esx' packages of Photon OS have been released...

UBUNTU-CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

Critical Photon OS Security Update - PHSA-2026-5.0-0925

Updates of 'nasm' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0926

Updates of 'openssh', 'linux-esx', 'linux' packages of Photon OS have been released...

.NET 10.0 security, bug fix, and enhancement update

10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 10.0.109-2 - Reduce time to detect hanging builds - Resolves: RHEL-191640...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

.NET 9.0 security, bug fix, and enhancement update

9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192469...

ALSA-2026:41893 Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29...

Fedora 44 : libreswan (2026-538c26f96a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-538c26f96a advisory. Update to 5.3.2 for CVE-2026-14957 with newsources Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Medium: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 Affected Packages: kernel6.12 Issue Correction: Run dnf update kernel6.12 --releasever 2023.12.20260720 or dnf update --advisory...

chromedriver-150.0.7871.128-1.1 on GA media (moderate)

chromedriver-150.0.7871.128-1.1 on GA media Announcement ID: openSUSE-SU-2026:11309-1 Rating: moderate Cross-References: CVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15902 CVE-2026-15903 CVE-2026-15904 CVE-2026-15905 Affected Products: openSUSE Tumbleweed An update that solves 7...

UBUNTU-CVE-2026-63866

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0254-1 Rating: important References: 1271656 Cross-References: CVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15902 CVE-2026-15903 CVE-2026-15904 CVE-2026-15905 Affected Products: openSUSE Backports...

CVE-2026-64096

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orignode RCU release batadvmcastpurgeorig removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses...

glib2 security update

2.80.4-14 - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation 2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512...

Important: python3.14

Issue Overview: When using the "tarfile" module with a file opened in "streaming mode" mode="r|" the tarfile module did not properly handle EOF, making archive parsing take exponentially longer. CVE-2026-11972 Affected Packages: python3.14 Issue Correction: Run dnf update python3.14 --releasever...

.NET 8.0 security, bug fix, and enhancement update

8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 8.0.128-2 - Reduce time to detect hanging builds - Resolves: RHEL-191652...