OPENSUSE-SU-2026:11761-1 tomcat11-11.0.25-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11752-1 kubevirt1.9-container-disk-1.9.0-3.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

OPENSUSE-SU-2026:11753-1 libBasicUsageEnvironment2-2026.08.25-1.1 on GA media

These are all security issues fixed in the libBasicUsageEnvironment2-2026.08.25-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-96438

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr update: fix stack buffer overflow in query capability query capability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfru update cap info using memcpy with the...

OPENSUSE-SU-2026:11754-1 perl-DBI-1.653.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90707

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.653 Description An issue in DBD::DBM allows the loading of arbitrary modules because the dbm type and dbm mldbm connect attributes are passed to the require function without validation. Since require treats path-shaped...

image-builder security update

72.0.0-1.0.2 - Rebuid to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

OPENSUSE-SU-2026:11760-1 tomcat10-10.1.59-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11759-1 tomcat-9.0.121-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pidfd ioctl function where PIDFD GET NAMESPACE ioctls perform a filesystem credentials ptrace access check without holding the target task's exec update lock. This...

osbuild-composer security update

175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 45 : kernel / kernel-headers (2026-a0019f8ab9)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a0019f8ab9 advisory. The 7.2.4 stable kernel update contains a number of important fixes across the tree. ---- The 7.2.3 stable kernel update contains a number of important fixes...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 45 : rclone (2026-612edb2029)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-612edb2029 advisory. Update to 1.75.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 45 : libsoup3 (2026-ce24b84bb1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce24b84bb1 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : dokuwiki (2026-2ec7f70c76)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ec7f70c76 advisory. Update to version 2026-07-14c security hotfix update - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description...

Fedora 45 : bubblewrap (2026-de382db258)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-de382db258 advisory. Update to 0.12.0 Fixes GHSA-pxhw-h44j-8pfx Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 45 : uboot-tools (2026-8866ec56bb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8866ec56bb advisory. Update to 2026.10 RC3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...