Security update for alloy (important)

openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20044-1 Rating: important References: bsc1251509 bsc1251716 bsc1253609 Cross-References: CVE-2025-47911 CVE-2025-47913 CVE-2025-58190 CVSS scores:...

MiracleLinux 4 : samba4-4.2.10-6.AXS4 (AXSA:2016-209:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-209:01 advisory. ipa IPA is an integrated solution to provide centrally managed Identity machine, user, virtual machines, groups, authentication credentials, Policy...

avahi-0.8-41.1 on GA media (moderate)

avahi-0.8-41.1 on GA media Announcement ID: openSUSE-SU-2026:10052-1 Rating: moderate Cross-References: CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVSS scores: CVE-2025-68276 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-68276 SUSE : 6.8...

MiracleLinux 4 : sssd-1.9.2-82.4.AXS4 (AXSA:2013-386:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-386:01 advisory. Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the syste...

ImageMagick-7.1.2.12-1.1 on GA media (moderate)

ImageMagick-7.1.2.12-1.1 on GA media Announcement ID: openSUSE-SU-2026:10012-1 Rating: moderate Cross-References: CVE-2025-68618 CVE-2025-68950 CVE-2025-69204 CVSS scores: CVE-2025-68618 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-68618 SUSE : 5.1...

CLSA-2026-1767799061 expat: Fix of 3 CVEs

Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser part of 839, reject direct parameter entity recursion part of 839 - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion...

CLSA-2026-1767798754 expat: Fix of 3 CVEs

Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser part of 839, reject direct parameter entity recursion part of 839 - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion...

SUSE-SU-2026:0023-1 Security update for erlang26

This update for erlang26 fixes the following issues: - CVE-2025-48040: Excessive resource consumption bsc1249472 - CVE-2025-48039: Excessive use of system resources bsc1249469 - CVE-2025-48038: Excessive use of system resources bsc1249470...

PT-2026-1063

Name of the Vulnerable Software and Affected Versions parisneo/lollms versions through 2.2.0 Description An issue exists in parisneo/lollms that allows unauthenticated users to upload and process files. The /api/files/extract-text endpoint does not require authentication, unlike other file-relate...

PT-2026-1065

Name of the Vulnerable Software and Affected Versions parisneo/lollms versions up to 2.2.0 Description A security issue exists in parisneo/lollms that allows any authenticated user to accept or reject friend requests belonging to other users. The respond request function within...

Security update for flannel (important)

openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2025:0491-1 Rating: important References: 1218694 1236522 1240516 Cross-References: CVE-2019-14697 CVE-2023-45288 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE: 6.9...

python315-3.15.0~a3-1.1 on GA media (moderate)

python315-3.15.0a3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15840-1 Rating: moderate Cross-References: CVE-2025-12084 CVE-2025-13836 CVE-2025-13837 CVSS scores: CVE-2025-12084 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-12084 SUSE : 6.3...

chromedriver-143.0.7499.146-1.1 on GA media (moderate)

chromedriver-143.0.7499.146-1.1 on GA media Announcement ID: openSUSE-SU-2025:15831-1 Rating: moderate Cross-References: CVE-2025-14174 CVE-2025-14765 CVE-2025-14766 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all...

Security update for flannel (important)

openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2025:0474-1 Rating: important References: 1218694 1236522 1240516 Cross-References: CVE-2019-14697 CVE-2023-45288 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE: 6.9...

Oracle Linux 9 : xorg-x11-server (ELSA-2025-20961)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20961 advisory. 1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119960, CVE-2025-62230 RHEL-120033, CVE-2025-62231 RHEL-125002 Tenable has extracted the preceding...

Fedora: Security Advisory (FEDORA-2025-6af3ed0ae3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2025:4227-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4227-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: ...

libIex-3_4-33-3.4.3-2.1 on GA media (moderate)

libIex-34-33-3.4.3-2.1 on GA media Announcement ID: openSUSE-SU-2025:15759-1 Rating: moderate Cross-References: CVE-2025-12495 CVE-2025-12839 CVE-2025-12840 CVSS scores: CVE-2025-12495 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-12495 SUSE : 8.5...

openSUSE Security Advisory (SUSE-SU-2025:4158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

blender-4.5-4.5.4-1.1 on GA media (moderate)

blender-4.5-4.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15755-1 Rating: moderate Cross-References: CVE-2022-0544 CVE-2022-0545 CVE-2022-0546 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...