php:8.2 security, bug fix, and enhancement update

libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

PT-2026-67108

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...

Debian dla-4712 : node-tar - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4712 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4712-1 [email protected]...

OPENSUSE-SU-2026:11433-1 ImageMagick-7.1.2.28-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.28-2.1 package on the GA media of openSUSE Tumbleweed...

Security update for keybase-client (low)

openSUSE Security Update: Security update for keybase-client Announcement ID: openSUSE-SU-2026:0272-1 Rating: low References: Cross-References: CVE-2026-39824 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...

libntpc1-1.2.5-1.1 on GA media (moderate)

libntpc1-1.2.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11417-1 Rating: moderate Cross-References: CVE-2026-18321 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the libntpc1-1.2.5-1....

Linux Distros Unpatched Vulnerability : CVE-2026-67299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp...

PT-2026-67138

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the keycloak-services component, used for managing authentication and authorization flows, allows a bypass of client access-type policy conditions. When a realm administrator...

Fedora 43 : nextcloud (2026-51116fe081)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51116fe081 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

gio-branding-upstream-2.88.3-1.1 on GA media (moderate)

gio-branding-upstream-2.88.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11415-1 Rating: moderate Cross-References: CVE-2026-15588 CVSS scores: CVE-2026-15588 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2026-15588 SUSE : 4.8...

php8-8.5.9-1.1 on GA media (moderate)

php8-8.5.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11418-1 Rating: moderate Cross-References: CVE-2026-17543 CVE-2026-17544 CVE-2026-7260 CVE-2026-9672 CVSS scores: CVE-2026-17543 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-17543 SUSE : 9.3...

[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43

Native bindings to the libgit2 library...

[SECURITY] Fedora 43 Update: libgit2-1.9.6-1.fc43

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

[SECURITY] Fedora 43 Update: exim-4.99.5-1.fc43

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.4.hum1 aarch64, x8664 grafana13.1-13.1.1-0.4.hum1.src src Security Fixes: grafana13.1: CVE-2026-18446...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tar: tar-1.35-9.1.hum1 aarch64, x8664 tar-1.35-9.1.hum1.src src Security Fixes: tar: CVE-2026-18477...

CVE-2026-67344

ArcadeDB before 26.7.2 fails to enforce the UPDATESCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access e.g., a...

UBUNTU-CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...