Critical Photon OS Security Update - PHSA-2026-5.0-92-0935

Updates of 'linux-esx', 'erlang', 'nginx', 'go', 'linux', 'libsolv' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0937

Updates of 'mysql' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0936

Updates of 'openssh' packages of Photon OS have been released...

SUSE SLES12 Security Update : prometheus-ha_cluster_exporter (SUSE-SU-2026:3421-1)

The remote SUSE Linux SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3421-1 advisory. This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

Debian dsa-6405 : ata-modules-6.12.100+deb13-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6405 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6405-1 [email protected] https://www.debian.org/securit...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21455-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21455-1 advisory. This update for amazon-ecs-init fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 inp...

Fedora 43 : unbound (2026-3170ee6a1c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3170ee6a1c advisory. Update to 1.25.2 rhbz2506061 Security fixes: - Fix CVE-2026-14586, Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC...

Security update for perl-Mojolicious (moderate)

openSUSE security update: security update for perl-mojolicious ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21496-1 Rating: moderate References: bsc1271431 Cross-References: CVE-2026-15747 CVSS scores: CVE-2026-15747 SUSE : 5.9...

Security update for openvpn (important)

openSUSE security update: security update for openvpn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21488-1 Rating: important References: bsc1270413 bsc1270414 Cross-References: CVE-2026-13122 CVE-2026-13698 CVSS scores: CVE-2026-13122 SUSE : 7.5...

tomcat10-10.1.57-1.1 on GA media (moderate)

tomcat10-10.1.57-1.1 on GA media Announcement ID: openSUSE-SU-2026:11400-1 Rating: moderate Cross-References: CVE-2026-59083 CVE-2026-59084 CVSS scores: CVE-2026-59083 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2026-59084 SUSE : 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L...

Fedora 43 : valkey (2026-9de44775c7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9de44775c7 advisory. Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

AlmaLinux 10 : fence-agents (ALSA-2026:48585)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:48585 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description block...

CVE-2026-65834 Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster...

Important: Red Hat Security Advisory: RHACS 4.10.6 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

SUSE-SU-2026:3433-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input...

SUSE-SU-2026:3431-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214...

[SECURITY] [DLA 4706-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 31, 2026 https://wiki.debian.org/LTS -...

CVE-2026-15976

CVE-2026-15976 affects SGLang. The vulnerability is an RCE that occurs when loading model weights from a HuggingFace repository via the /update_weights_from_disk path, where torch.load(..., weights_only=False) may deserialize pickle payloads from .bin files. This is tied to the pickle-deserializa...