Security update for afterburn (important)

openSUSE Security Update: Security update for afterburn Announcement ID: openSUSE-SU-2026:0243-1 Rating: important References: 1196972 1242665 1243850 1244199 1270175 1270483 1270555 1270651 1270787 1270817 1270886 1270949 Cross-References: CVE-2022-24713 CVE-2024-12224 CVE-2025-3416 CVE-2025-579...

buildah security update

1.43.1-4.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-4 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645...

python-pillow security update

5.1.1-22 - Security fix for CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380 Resolves: RHEL-192830, RHEL-192770, RHEL-192684, RHEL-192731...

APSB26-83 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves critical vulnerabilities. Successful exploitation could lead to arbitrary code execution...

AlmaLinux 10 : podman (ALSA-2026:38495)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38495 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in...

APSB26-73 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation, and security feature bypass...

RockyLinux 9 : buildah (RLSA-2026:38493)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38493 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

KB5099538: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2026)

The remote Windows host is missing security update 5099538. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

RockyLinux 8 : xorg-x11-server-Xwayland (RLSA-2026:38488)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38488 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...

SUSE SLES15 Security Update : kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2858-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2858-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: -...

KB5099444: Windows Server 2012 R2 Security Update (July 2026)

The remote Windows host is missing security update 5099444. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

RockyLinux 10 : podman (RLSA-2026:38495)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38495 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2026:2853-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2853-1 advisory. Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing...

APSB26-77 : Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop for Windows. This update includes a fix for critical vulnerabilities that could lead to arbitrary code execution in the context of the current user...

AlmaLinux 9 : plexus-utils (ALSA-2026:38796)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:38796 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

389-ds-base security update

1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-14905 Orabug: 39146844 1.3.11.1-5.0.5 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules Orabug: 38388205...

nginx:1.24 security, bug fix, and enhancement update

1.24.0-3.0.1.3 - Remove Red Hat references Orabug: 29498217 1:1.24.0-3.3 - Resolves: RHEL-191779 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188406 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted...

KB5099535: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2026)

The remote Windows host is missing security update 5099535. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

ALSA-2026:39179 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete CVE-2026-46116 kernel: XFS data corruption usi...