472419 matches found
python-tornado security update
6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...
python-tornado security update
6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...
Oracle Linux 9 : ELSA-2026-67285-0: / rust (ELSA-2026-672850)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-672850 advisory. 1.92.0-2 - Apply libgit2 fix for CVE-2026-53587 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
ALSA-2026:67156 Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
ALSA-2026:67314 Important: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...
python311-3.11.16-1.1 on GA media (moderate)
python311-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11756-1 Rating: moderate Cross-References: CVE-2021-4189 CVE-2026-45186 CVE-2026-72522 CVE-2026-9669 CVSS scores: CVE-2021-4189 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-45186 SUSE : 2.9...
tomcat-9.0.121-1.1 on GA media (moderate)
tomcat-9.0.121-1.1 on GA media Announcement ID: openSUSE-SU-2026:11759-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...
ALSA-2026:67278 Moderate: perl:5.32 security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
openssl security, bug fix, and enhancement update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...
Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...
Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...
openssl security, bug fix, and enhancement update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...
CVE-2026-81648 CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration an...
[SECURITY] Fedora 44 Update: PackageKit-1.4.0-1.fc44
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 44 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc44
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.9-1.fc44
mongo-c-driver is a client library written in C for MongoDB...
[SECURITY] Fedora 43 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc43
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.9-1.fc43
mongo-c-driver is a client library written in C for MongoDB...
CVE-2026-90524
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...