Debian dla-4703 : openjdk-17-dbg - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4703 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4703-1 [email protected]...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2026-127 (ALASKERNEL-5.4-2026-127)

The version of kernel installed on the remote host is prior to 5.4.302-226.485. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-127 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycli...

SUSE SLES15 Security Update : kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3289-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3289-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues: The following security issues were fixed:...

SUSE SLES16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:22841-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22841-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate...

SUSE SLES15 Security Update : kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3248-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3248-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3286-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3286-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: -...

Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malform...

ALSA-2026:47083 Important: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 For more details about the security issues, including the impact, a CVSS score,...

ALSA-2026:47082 Important: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 For more details about the security issues, including the impact, a CVSS score,...

APSB26-89 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses critical vulnerabilities that could lead to privilege escalation and arbitrary code execution...

SUSE SLES16 Security Update : google-cloud-sap-agent (SUSE-SU-2026:22848-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22848-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

SUSE SLED15: jackson-annotations / jackson-core / jackson-databind / etc (SUSE-SU-2026:3273-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3273-1 advisory. - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_84-default / etc (SUSE-SU-2026:3256-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3256-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes various security issues: The following security issues were fixed: -...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.2-0.2.hum1 aarch64, x8664 tempo3.0-3.0.2-0.2.hum1.src src Security Fixes: tempo3.0: CVE-2026-48586 CVE-2026-55969...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

MGASA-2026-0303 Updated x11-server x11-server-xwayland tigervnc packages fix security vulnerabilities

The updated packages fix security vulnerabilities: glamor Font Atlas Heap Buffer Overflow. CVE-2026-55999 GLX contextTags Use-After-Free in CommonMakeCurrent. CVE-2026-56000...

MGASA-2026-0301 Updated nginx packages fix security vulnerabilities

CVE-2026-42533: Heap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string...

Updated libyang packages fix a security vulnerability

The updated packages fix a security vulnerability: Heap Use-After-Free Write in XML Metadata Parsing. CVE-2026-41401...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.5.hum1 aarch64, x8664 jaeger-2.20.0-0.5.hum1.src src Security Fixes: jaeger: CVE-2026-48586 CVE-2026-55969...

CVE-2026-64772

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination o...