OPENSUSE-SU-2026:11730-1 cargo-audit-0.22.2~git0.281452c-3.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

gstreamer1-plugins-bad-free security update

1.10.4-4.0.5 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...

PT-2026-89710

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89077

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

PT-2026-89716

These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11736-1 python313-modelscope-1.40.0-1.1 on GA media

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

buildah security update

1.43.1-6.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-6 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830...

ALSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

thunderbird security update

140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

CVE-2026-86760: Incorrect Authorization

Snipe-IT versions 8.2.0 through 8.6.x fixed in 8.7.0 contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update. The single-user edit route assigned the activated field from the request payload before evaluating the canEditAuthFields authorization gate, so an...

CVE-2026-86746: Improper Privilege Management

Snipe-IT before 8.7.0 contains an authorization bypass vulnerability in Livewire components that enforce authorization only at the route level, not within component lifecycle methods. Attackers with a valid authenticated session can replay signed component snapshots via POST /livewire/update to...

qt6-qt5compat security update

6.10.1-1.1 - Fix out-of-bounds read in QTextCodec::codecForName CVE-2026-9499 Resolves: RHEL-247204...

qt5-qtbase security update

5.15.9-11.1 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247216...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21793-1)

"The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21793-1 advisory. Changes in hauler: - update to 2.1.0 bsc1265425, CVE-2026-41888: v2.1.0 is a minor release built on the containerd- native foundation laid down...

Oracle Linux 8 : ELSA-2026-65160-0: / thunderbird (ELSA-2026-651600)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651600 advisory. 140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

Oracle Linux 10 : ELSA-2026-65159-0: / thunderbird (ELSA-2026-651590)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651590 advisory. 140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Fedora 44 : openvpn (2026-725faae162)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...