26302 matches found
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue CVE-2026-33186: Update google.golang.org/grpc dependency bsc1260264. CVE-2026-39821: Update golang.org/x/net/idna dependency bsc1266603. CVE-2026-39827: Update golang.org/x/crypto dependency bsc1266171. CVE-2026-39828: Update...
Photon OS 4.0: Rsync PHSA-2026-4.0-1038
An update of the rsync package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
gstreamer-plugins-bad-1.28.4+24-1.1 on GA media (moderate)
gstreamer-plugins-bad-1.28.4+24-1.1 on GA media Announcement ID: openSUSE-SU-2026:11088-1 Rating: moderate Cross-References: CVE-2026-52718 CVE-2026-52720 CVSS scores: CVE-2026-52718 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-52720 SUSE : 8.8...
Oracle Linux 9 : .NET / 8.0 (ELSA-2026-25220)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25220 advisory. 8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 8.0.127-1 - Update to...
Debian dla-4646 : libecpg-compat3 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4646 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4646-1 [email protected]...
GHSA-64MM-VXMG-Q3VJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, kubeflow-katib, kubeflow-pipelines, argo-workflows...
Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty have been published in a security bulletin...
GHSA-FCW5-X6J4-CCMP vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter...
GHSA-WFQX-GJRF-G28R vulnerabilities
Vulnerabilities for packages: crossplane-fips, crossplane...
docker-stable-24.0.9_ce-18.1 on GA media (moderate)
docker-stable-24.0.9ce-18.1 on GA media Announcement ID: openSUSE-SU-2026:11075-1 Rating: moderate Cross-References: CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-33814 CVE-2026-33997 CVE-2026-34040 CVE-2026-39821 CVE-2026-41567 CVSS scores: CVE-2026-33186 SUSE : 8.1...
USN-8462-1: Linux kernel (Oracle) vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...
GHSA-34XG-WGJX-8XPH vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Important: Red Hat Security Advisory: .NET 9.0 security update
An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: Security: re-vendor Go dependencies to address CVEs tracked against containerized-data-importer backport of upstream PR 4110, post-v1.65.0. Fixed by this update: google.golang.org/grpc 1.65.0 - 1.79.3: bsc1260295 CVE-2026-331...
Medium: golang
Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-107 (ALASKERNEL-5.15-2026-107)
"The version of kernel installed on the remote host is prior to 5.15.209-147.245. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-107 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switc...
[SECURITY] [DSA 6359-1] gst-plugins-good1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6359-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 21, 2026 https://www.debian.org/security/faq -...
GHSA-5PRR-V3J2-97MH vulnerabilities
Vulnerabilities for packages: logstash, ruby3.4-rails, ruby3.2-rails, kube-logging-operator...