Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106771 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...

Security Updates for Microsoft PowerPoint Products (September 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...

Slackware Linux 15.0 / current xz Vulnerability (SSA:2026-252-01)

The version of xz installed on the remote host is prior to 5.8.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-252-01 advisory. New xz packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding description blo...

OPENSUSE-SU-2026:11738-1 xen-4.22.0_04-1.1 on GA media

These are all security issues fixed in the xen-4.22.004-1.1 package on the GA media of openSUSE Tumbleweed...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

OPENSUSE-SU-2026:11732-1 containerized-data-importer1.66-api-1.66.1-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89709

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...

redis:6 security update

6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

ALSA-2026:66000 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

redis:7 security update

7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

CVE-2026-87056

A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...

CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-73270 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-73270 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

CVE-2026-83950

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:29+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review...

CVE-2026-78455

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:15+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:50:01+00:00|...

CVE-2026-72927

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:18+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:14+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:22:27+00:00|...