472440 matches found
RLSA-2026:65895 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: crypto/x50...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
OPENSUSE-SU-2026:11747-1 python310-3.10.21-1.1 on GA media
These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11739-1 389-ds-3.3.1+8c2711bd6-1.1 on GA media
These are all security issues fixed in the 389-ds-3.3.1+8c2711bd6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11742-1 google-guest-agent-20260903.01-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20260903.01-1.1 package on the GA media of openSUSE Tumbleweed...
python3.12-lxml security update
4.9.3-2.1 - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488...
git-lfs security update
3.7.1-4.3 - Rebuild with updated golang - Resolves: RHEL-241575, RHEL-242274, RHEL-241799...
vim security update
8.2.2637-26.0.1.el98.21 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.21 - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator 2:8.2.2637-26.20 - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes 2:8.2.2637-26.19 - RHEL-215684 CVE-2026-59857...
kernel security, bug fix, and enhancement update
4.18.0-553.162.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
kernel security, bug fix, and enhancement update
6.12.0-211.53.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Fedora 43 : freerdp2 (2026-3fe3e3ae10)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3fe3e3ae10 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
CVE-2026-88282: Improper Neutralization of Special Elements used in an OS Command
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update...
Fedora 43 : gdk-pixbuf2 (2026-cf5d926f46)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf5d926f46 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...
RHEL 8 : freerdp (RHSA-2026:66281)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66281 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
OPENSUSE-SU-2026:11740-1 azure-storage-azcopy-10.32.8-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.8-1.1 package on the GA media of openSUSE Tumbleweed...
Important: git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...
CVE-2026-49838: Improper Validation of Array Index
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...
OPENSUSE-SU-2026:11743-1 google-osconfig-agent-20260908.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed...