OPENSUSE-SU-2026:11752-1 kubevirt1.9-container-disk-1.9.0-3.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-96330

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs attr update meta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressed size field before the name and...

Fedora 45 : rclone (2026-612edb2029)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-612edb2029 advisory. Update to 1.75.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

osbuild-composer security update

101.5-1.0.1 - Bump to 101.5-1.0.1 - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 - CVE-2026-34986...

jupyter-nbconvert-7.17.1-2.1 on GA media (moderate)

jupyter-nbconvert-7.17.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11725-1 Rating: moderate Cross-References: CVE-2026-6658 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-geopy-2.5.0-1.1 on GA media (moderate)

python313-geopy-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11724-1 Rating: moderate Cross-References: CVE-2026-77387 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-pypdf-6.16.2-3.1 on GA media (moderate)

python313-pypdf-6.16.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11726-1 Rating: moderate Cross-References: CVE-2026-84309 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Security update for containerized-data-importer1.65 (important)

openSUSE security update: security update for containerized-data-importer1.65 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21824-1 Rating: important References: bsc1238699 bsc1239322 bsc1241838 bsc1248946 bsc1251495 bsc1251689 bsc1253506 bsc12537...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

openSUSE 16 Security Update : waylyrics (openSUSE-SU-2026:21815-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21815-1 advisory. Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC suppor...

OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-16164 Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

OPENSUSE-SU-2026:11759-1 tomcat-9.0.121-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11761-1 tomcat11-11.0.25-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11760-1 tomcat10-10.1.59-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.6 release and security update

Red Hat AMQ Broker 7.13.6 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Infinite loop

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Infinite loop through the POST /api/v1/folders/id/update/parent handler, which allows a folder to be moved under itself or one of its subfolders, creating a cycle in the folder hierarchy. An attacker can caus...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

EUVD-2026-75807

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838 GoBGP confederation validation panics on empty AS_PATH attribute

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...