CLSA-2025-1755475972 TuxCare security update for uvicorn (2 CVEs)

TuxCare rebuilt uvicorn to address 2 CVEs. Fixed in 0.11.6.post1+tuxcare...

CLSA-2025-1750810247 TuxCare security update for waitress (2 CVEs)

TuxCare rebuilt waitress to address 2 CVEs. Fixed in 2.1.2.post1+tuxcare...

GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: nextcloud-server...

SUSE-SU-2026:3482-1 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed - CVE-2026-44891: memory exhaustion in io.netty:netty-codec-stomp bsc1271435. - CVE-2026-55831: resource exhaustion/DoS in...

RHSA-2026:49911 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-cng, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips, gitlab-runner...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-cng, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips, gitlab-runner...

Amazon Linux 2 : python-tornado, --advisory ALAS2-2026-3847 (ALAS-2026-3847)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3847 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...

SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:3453-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3453-1 advisory. Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information disclosure and deni...

Fedora 43 : open62541 (2026-1435f05fde)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1435f05fde advisory. Update to 1.5.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

nodejs26-26.5.1-1.1 on GA media (moderate)

nodejs26-26.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11440-1 Rating: moderate Cross-References: CVE-2026-56846 CVE-2026-56847 CVE-2026-56848 CVE-2026-56850 CVE-2026-58039 CVE-2026-58040 CVE-2026-58041 CVE-2026-58042 CVE-2026-58043 CVE-2026-58044 CVE-2026-58045 CVSS scores:...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15718 firefox: thunderbird: Mitigation...

CVE-2026-56608

CVE-2026-56608 affects HCL iControl with a Missing Access Control flaw. The issue allows users to access or view administrator-level functionalities without proper authorization due to failed enforcement of granular access controls. The public records (NVD, CVE lists, and related feeds) do not sp...

CVE-2026-64056

creationtimestamp| type| source ---|---|--- 2026-08-03 08:38:51+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-64047

creationtimestamp| type| source ---|---|--- 2026-08-03 08:38:47+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

Oracle Linux 10 : thunderbird (ELSA-2026-49621)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49621 advisory. 140.13.0-1.0.1 - Add Oracle prefs 140.13.0-1 - Update to 140.13.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

RockyLinux 9 : firefox (RLSA-2026:47104)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47104 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in th...

GHSA-M4P7-R5RC-7G4J vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, py3-cassandra-medusa, superset, kserve, mlflow, airflow...

gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media (moderate)

gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11416-1 Rating: moderate Cross-References: CVE-2026-62289 CVE-2026-62291 CVE-2026-62292 CVE-2026-62377 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Descriptio...