UBUNTU-CVE-2026-84226

Unknown description...

PT-2026-86429

A vulnerability exists in gRPC-Go servers configured with xds.NewGRPCServer where a crafted request missing both :authority and Host headers can cause a server panic, resulting in a Denial of Service DoS. Servers built with xds.NewGRPCServer install an xDS routing interceptor on every RPC. This...

OPENSUSE-SU-2026:11683-1 gegl-0.4.70-2.1 on GA media

These are all security issues fixed in the gegl-0.4.70-2.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

OPENSUSE-SU-2026:11690-1 python310-3.10.20-10.1 on GA media

These are all security issues fixed in the python310-3.10.20-10.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11684-1 grafana-12.4.10-1.1 on GA media

These are all security issues fixed in the grafana-12.4.10-1.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

The vulnerability of the `create_securityfs_measurement_lists()` function in the `security/integrity/ima/ima_fs.c` module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the createsecurityfsmeasurementlists function in the security/integrity/ima/imafs.c module of the Linux kernel’s security subsystem is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a...

Oracle Linux 10 : ELSA-2026-63332-0: / buildah (ELSA-2026-633320)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-633320 advisory. - rebuild for CVE-2026-33810 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

OPENSUSE-SU-2026:11688-1 ollama-0.33.1-1.1 on GA media

These are all security issues fixed in the ollama-0.33.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11680-1 agama-web-ui-24+0.a836cced5-52.1 on GA media

These are all security issues fixed in the agama-web-ui-24+0.a836cced5-52.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11681-1 cups-filters-1.28.17-9.1 on GA media

These are all security issues fixed in the cups-filters-1.28.17-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11686-1 helm3-3.21.3-8.1 on GA media

These are all security issues fixed in the helm3-3.21.3-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11685-1 hauler-2.1.0-2.1 on GA media

These are all security issues fixed in the hauler-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

hauler-2.1.0-1.1 on GA media (moderate)

hauler-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11667-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-41178 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

The vulnerability of the iptfs_consume_frags() function in the net/xfrm/xfrm_iptfs.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsconsumefrags function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

Debian dla-4770 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4770 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4770-1 [email protected]...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...

OPENSUSE-SU-2026:11677-1 MozillaFirefox-155.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed...

mcphost-0.34.0-10.1 on GA media (moderate)

mcphost-0.34.0-10.1 on GA media Announcement ID: openSUSE-SU-2026:11670-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-81092 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-81092 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N...