Security update for gitea-tea (important)

openSUSE security update: security update for gitea-tea ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21603-1 Rating: important References: bsc1234598 bsc1235367 bsc1239493 bsc1241819 bsc1251471 bsc1251663 bsc1253576 Cross-References: CVE-2024-453...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangelink CVE-2026-46120 kernel: sched/psi: fix race...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2026-55775)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55775 advisory. 1.8.0.504.b01-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.504.b01-1.1 - Update to 8u504-b01 GA. - Update release notes for...

java-1.8.0-openjdk security update

1.8.0.504.b01-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.504.b01-1.1 - Update to 8u504-b01 GA. - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - This tarball is embargoe...

java-25-openjdk security update

1:25.0.4.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.1.1-1.1 - Update to jdk-25.0.4.1+1 GA - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2026-08-18 @ 1p...

java-21-openjdk security update

1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625 1:21.0.12.1.1-1.1 - Update to jdk-21.0.12.1+1 GA - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - This...

java-17-openjdk security update

17.0.20.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.1.1-1.1 - Update to jdk-17.0.20.1+1 GA - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - This tarball is embargoed until 2026-08-18 @ 1p...

MiracleLinux 9 : frr-8.5.3-15.el9_8.1 (AXSA:2026-1592:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1592:05 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

Fedora 43 : firefox (2026-170e9d62c6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-170e9d62c6 advisory. - Update to latest upstream 154.0 - Enabled Wayland session restore on KDE. Tenable has extracted the preceding description block directly from the...

PT-2026-80606

These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

kernel security, bug fix, and enhancement update

6.12.0-211.49.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Virtuozzo Infrastructure 7.3 Update 1 Hotfix 3 (7.3.1-66)

This update provides security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fedora 44 : wireshark (2026-5034844482)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5034844482 advisory. New version of wireshark. It includes multiple CVE fixes that do not have the CVE numbers yet. Tenable has extracted the preceding description block...

Security update for python313 (important)

openSUSE security update: security update for python313 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21595-1 Rating: important References: bsc1257041 bsc1257044 bsc1265268 bsc1268977 bsc1269066 bsc1269788 bsc1269959 bsc1271192 Cross-References:...

Virtuozzo Infrastructure 7.4 Hotfix 2 (7.4.0-80)

This update provides stability and security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561. Vulnerability id: VSTOR-87519 Storage version bumping could remain disabled until the end of a cluster update,...

Security update for kubevirt1.8 (important)

openSUSE security update: security update for kubevirt1.8 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21590-1 Rating: important References: bsc1262265 bsc1265736 bsc1266151 bsc1266575 bsc1267120 bsc1269093 bsc1272011 bsc1272604 bsc1272840...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)

This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...

OPENSUSE-SU-2026:11558-1 MozillaThunderbird-140.14.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update

Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...