Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

OPENSUSE-SU-2026:11732-1 containerized-data-importer1.66-api-1.66.1-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

PT-2026-89709

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

PT-2026-89069

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21793-1)

"The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21793-1 advisory. Changes in hauler: - update to 2.1.0 bsc1265425, CVE-2026-41888: v2.1.0 is a minor release built on the containerd- native foundation laid down...

Oracle Linux 10 : ELSA-2026-65159-0: / thunderbird (ELSA-2026-651590)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651590 advisory. 140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

thunderbird security update

140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

List of Security Fixes and Improvements in Veeam Plug-in for oVirt KVM

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for oVirt KVM. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

qt5-qtbase security update

5.15.9-11.1 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247216...

redis:6 security update

6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373...

OPENSUSE-SU-2026:11730-1 cargo-audit-0.22.2~git0.281452c-3.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89708

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89077

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563: Authentication Bypass by Spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

ALSA-2026:66000 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

Linux kernel L2TP Buffer Overflow DoS

The vulnerability in the l2tpsessiongetbyifname function within net/l2tp/l2tpcore.c of the Linux kernel’s L2TP tunneling module is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

python3.14-cryptography security update

45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249...

List of Security Fixes and Improvements in Veeam Plug-in for Proxmox VE

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Proxmox VE. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...