Fedora 45 : kernel / kernel-headers (2026-a0019f8ab9)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a0019f8ab9 advisory. The 7.2.4 stable kernel update contains a number of important fixes across the tree. ---- The 7.2.3 stable kernel update contains a number of important fixes...

openSUSE 16 Security Update : waylyrics (openSUSE-SU-2026:21815-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21815-1 advisory. Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC suppor...

Fedora 45 : libevent (2026-0a83f1b852)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0a83f1b852 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21816-1 advisory. Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, . Tenable has extracted...

OPENSUSE-SU-2026:11754-1 perl-DBI-1.653.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11761-1 tomcat11-11.0.25-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-16164 Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

OPENSUSE-SU-2026:11752-1 kubevirt1.9-container-disk-1.9.0-3.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

OPENSUSE-SU-2026:11753-1 libBasicUsageEnvironment2-2026.08.25-1.1 on GA media

These are all security issues fixed in the libBasicUsageEnvironment2-2026.08.25-1.1 package on the GA media of openSUSE Tumbleweed...

python313-pypdf-6.16.2-3.1 on GA media (moderate)

python313-pypdf-6.16.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11726-1 Rating: moderate Cross-References: CVE-2026-84309 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-geopy-2.5.0-1.1 on GA media (moderate)

python313-geopy-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11724-1 Rating: moderate Cross-References: CVE-2026-77387 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Security update for containerized-data-importer1.65 (important)

openSUSE security update: security update for containerized-data-importer1.65 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21824-1 Rating: important References: bsc1238699 bsc1239322 bsc1241838 bsc1248946 bsc1251495 bsc1251689 bsc1253506 bsc12537...

jupyter-nbconvert-7.17.1-2.1 on GA media (moderate)

jupyter-nbconvert-7.17.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11725-1 Rating: moderate Cross-References: CVE-2026-6658 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-90482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pidfd ioctl function where PIDFD GET NAMESPACE ioctls perform a filesystem credentials ptrace access check without holding the target task's exec update lock. This...

PT-2026-96438

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr update: fix stack buffer overflow in query capability query capability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfru update cap info using memcpy with the...

PT-2026-90707

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.653 Description An issue in DBD::DBM allows the loading of arbitrary modules because the dbm type and dbm mldbm connect attributes are passed to the require function without validation. Since require treats path-shaped...

OPENSUSE-SU-2026:11756-1 python311-3.11.16-1.1 on GA media

These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90524

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A log-processing component reintroduced a vulnerable version of a bundled HTTP client library after a previous update that had fixed known issues was reverted. T...

PT-2026-96330

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs attr update meta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressed size field before the name and...