MGASA-2026-0232 Updated nats-server packages fix security vulnerabilities

nats-server and its dependencies are updated to fix CVE-2025-30215 Missing access controls for JS API in multi-tenancy...

python315-3.15.0~b2-1.1 on GA media (moderate)

python315-3.15.0b2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11101-1 Rating: moderate Cross-References: CVE-2021-4189 CVE-2026-3276 CVE-2026-7210 CVE-2026-7774 CVE-2026-8328 CVSS scores: CVE-2021-4189 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-3276 SUSE : 7.5...

Photon OS 4.0: Imagemagick PHSA-2026-4.0-1040

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1040. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : python3.12-urllib3 (ELSA-2026-28159)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-28159 advisory. - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184901, RHEL-185126 - Security fix for CVE-2025-66471 - Security fi...

GHSA-6JV3-5F52-599M vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-R75F-5X8P-QVMC vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-78JW-WW3G-9WP7 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips, nginx-mainline, nginx-stable...

GHSA-2388-JP8V-FG9W vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller, nginx-mainline...

Security Bulletin: Security Vulnerabilities were found in IBM Security Verify Directory (CVE-2018-2799)

Summary Security Vulnerabilities were addressed in IBM Security Verify Directory Vulnerability Details CVEID:CVE-2018-2799 DESCRIPTION: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171,...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue CVE-2026-33186: Update google.golang.org/grpc dependency bsc1260264. CVE-2026-39821: Update golang.org/x/net/idna dependency bsc1266603. CVE-2026-39827: Update golang.org/x/crypto dependency bsc1266171. CVE-2026-39828: Update...

Photon OS 4.0: Rsync PHSA-2026-4.0-1038

An update of the rsync package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

gstreamer-plugins-bad-1.28.4+24-1.1 on GA media (moderate)

gstreamer-plugins-bad-1.28.4+24-1.1 on GA media Announcement ID: openSUSE-SU-2026:11088-1 Rating: moderate Cross-References: CVE-2026-52718 CVE-2026-52720 CVSS scores: CVE-2026-52718 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-52720 SUSE : 8.8...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-25220)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25220 advisory. 8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 8.0.127-1 - Update to...

Debian dla-4646 : libecpg-compat3 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4646 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4646-1 [email protected]...

GHSA-64MM-VXMG-Q3VJ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubeflow-pipelines, kubeflow-katib, argo-workflows, gitlab-rails-ce...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty have been published in a security bulletin...

GHSA-FCW5-X6J4-CCMP vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...

GHSA-WFQX-GJRF-G28R vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane...

docker-stable-24.0.9_ce-18.1 on GA media (moderate)

docker-stable-24.0.9ce-18.1 on GA media Announcement ID: openSUSE-SU-2026:11075-1 Rating: moderate Cross-References: CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-33814 CVE-2026-33997 CVE-2026-34040 CVE-2026-39821 CVE-2026-41567 CVSS scores: CVE-2026-33186 SUSE : 8.1...

USN-8462-1: Linux kernel (Oracle) vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...