qt6-qt5compat security update

6.10.1-1.1 - Fix out-of-bounds read in QTextCodec::codecForName CVE-2026-9499 Resolves: RHEL-247204...

OPENSUSE-SU-2026:11736-1 python313-modelscope-1.40.0-1.1 on GA media

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11738-1 xen-4.22.0_04-1.1 on GA media

These are all security issues fixed in the xen-4.22.004-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89715

These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : libevent (2026-72d10c874d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

Slackware Linux 15.0 / current xz Vulnerability (SSA:2026-252-01)

The version of xz installed on the remote host is prior to 5.8.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-252-01 advisory. New xz packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding description blo...

Fedora 44 : openvpn (2026-725faae162)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : complyctl (2026-f33ade2ba6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f33ade2ba6 advisory. This update aligns the package to the latest Upstream release, which is also the first stable version of complyctl. It introduced the core redesign...

python-urllib3 security update

1.10.2-7.0.3 - Backport fix for CVE-2025-66471 Orabug: 39233228...

OPENSUSE-SU-2026:11731-1 containerized-data-importer1.65-api-1.65.0-3.1 on GA media

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-86765: Missing Authorization

Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...

PT-2026-89716

These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-77974: Missing Authentication for Critical Function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-86760: Incorrect Authorization

Snipe-IT versions 8.2.0 through 8.6.x fixed in 8.7.0 contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update. The single-user edit route assigned the activated field from the request payload before evaluating the canEditAuthFields authorization gate, so an...

PT-2026-89076

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...

PT-2026-89069

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

List of Security Fixes and Improvements in Veeam Plug-in for Xen

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Xen. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security Fixes a...

PT-2026-89710

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11729-1 ansible-creator-26.8.0-1.1 on GA media

These are all security issues fixed in the ansible-creator-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:66179 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...