Security update for php8 (critical)

openSUSE security update: security update for php8 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21532-1 Rating: critical References: bsc1273075 bsc1273076 bsc1273077 bsc1273078 Cross-References: CVE-2026-17543 CVE-2026-17544 CVE-2026-7260...

ffmpeg-4-4.4.8-3.1 on GA media (moderate)

ffmpeg-4-4.4.8-3.1 on GA media Announcement ID: openSUSE-SU-2026:11448-1 Rating: moderate Cross-References: CVE-2026-64830 CVE-2026-64832 CVE-2026-64835 CVE-2026-66038 CVE-2026-66039 CVSS scores: CVE-2026-64830 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-64830 SUSE : 8.5...

About the security content of macOS Sonoma 14.8.9

About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Important Photon OS Security Update - PHSA-2026-5.0-92-0944

Updates of 'linux' packages of Photon OS have been released...

Fedora 44 : chromium (2026-976bbbc661)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-976bbbc661 advisory. security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019 Tenable has extracted the preceding description...

PT-2026-68522

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description A heap-based buffer overflow occurs in the redis client of the Apache Portable Runtime Utility. A heap-based buffer overflow is a memory corruption issue that happens whe...

EulerOS 2.0 SP15 : httpd (EulerOS-SA-2026-2888)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious...

CVE-2026-67687

The CVE-2026-67687 case concerns ICS-Park Smart Park Management System v2.0 (based on RuoYi). A vertical privilege escalation exists via missing authorization checks in two endpoints: /system/role/save (RoleController.java) and /system/user/update (UserController.java). An authenticated low-privi...

amazon-ecs-init-1.106.0-1.1 on GA media (moderate)

amazon-ecs-init-1.106.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11443-1 Rating: moderate Cross-References: CVE-2026-10722 CVSS scores: CVE-2026-10722 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-10722 SUSE : 8.7...

Critical Photon OS Security Update - PHSA-2026-4.0-1061

Updates of 'curl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0946

Updates of 'libvirt', 'libxml2', 'runc', 'acl', 'perl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0947

Updates of 'libgcrypt', 'python3-mistune', 'gnuplot', 'tpm2-tools', 'glib-networking' packages of Photon OS have been released...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.108/.109 for Windows and Mac and 151.0.7922.108 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

AlmaLinux 9 : pipewire (ALSA-2026:47082)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:47082 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description block...

TencentOS Server 3: pki-deps:10.6 (TSSA-2026:0824)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0824 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

AlmaLinux 10 : java-25-openjdk (ALSA-2026:42899)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42899 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

kernel security, bug fix, and enhancement update

5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:3503-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3503-1 advisory. - CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997. - CVE-2026-15337: potential denial-of-service...

Oracle Linux 9 : gimp (ELSA-2026-50817)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50817 advisory. - fix CVE-2026-42169 - fix CVE-2026-66758 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

RockyLinux 10 : libgcrypt (RLSA-2026:50144)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50144 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block...