[SECURITY] Fedora 44 Update: perl-Dancer2-2.0.1-4.fc44

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

[SECURITY] Fedora 44 Update: perl-Data-Entropy-0.010-1.fc44

This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient becau...

[SECURITY] Fedora 44 Update: perl-Protocol-HTTP2-1.14-1.fc44

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

[SECURITY] Fedora 45 Update: perl-DBI-1.653-1.fc45

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...

[SECURITY] Fedora 45 Update: perl-Dancer2-2.1.0-3.fc45

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

[SECURITY] Fedora 45 Update: perl-Data-Entropy-0.010-1.fc45

This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient becau...

[SECURITY] Fedora 45 Update: perl-Protocol-HTTP2-1.14-1.fc45

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

CVE-2026-78225: Use of Hard-coded Cryptographic Key

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

PT-2026-92298

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the gf base update finger base function within gf base.c allows for an out-of-bounds write. This issue can be exploited to achieve loca...

CVE-2026-83431: Improper Authorization

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: WebUI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successf...

CVE-2026-83242: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-87208: Improper Access Control

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-81923: Missing Authorization

In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...

Security update for kimi-code (moderate)

openSUSE security update: security update for kimi-code ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21849-1 Rating: moderate References: bsc1268927 bsc1269951 Cross-References: CVE-2026-45736 CVE-2026-48779 CVSS scores: CVE-2026-45736 SUSE : 4.4...

Security update for hauler (critical)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21841-1 Rating: critical References: bsc1265425 bsc1278584 bsc1278934 bsc1279296 bsc1279416 Cross-References: CVE-2026-41888 CVE-2026-56854...

.NET 8.0 security, bug fix, and enhancement update

8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248...

.NET 9.0 security, bug fix, and enhancement update

9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279...

CVE-2026-79411: Improper Privilege Management

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full administrator. The user-update endpoint route admin.settings.users.update, UserController::update...

RHEL 10 : .NET 10.0 (RHSA-2026:67530)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67530 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

SUSE SLES15 : Recommended update for initial livepatch (SUSE-SU-2026:4120-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4120-1 advisory. This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later...