UBUNTU-CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

UBUNTU-CVE-2026-99012

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent connect calls isosockconnect checks the socket state before taking the socket lock and drops the lock again before setting up a connection. Two callers can both pass the admission check while...

UBUNTU-CVE-2026-99056

In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...

python3.9 security update

3.9.25-7.0.1.el98.6 - Remove upstream URL reference 3.9.25-7.6 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 3.9.25-7.5 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext wh...

RHEL 8 : xorg-x11-server (RHSA-2026:89747)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89747 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

RHEL 9 : libreswan (RHSA-2026:89748)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89748 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

RHEL 9 : python3.9 (RHSA-2026:89742)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89742 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Google Chrome Microsoft Edge DoS

The vulnerability in the Platform component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

UBUNTU-CVE-2026-99001

In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: cancel the client work on remove xei2cnotifier stores the DesignWare adapter in i2c-adapter and schedules i2c-work when the adapter is registered under the xe I2C platform device, and xei2cclientwork then instantiates...

About the security content of Safari 27.2

Download JSON About the security content of Safari 27.2 This document describes the security content of Safari 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

MiracleLinux 8 : kernel-4.18.0-553.176.1.el8_10 (AXSA:2026-2154:108)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2154:108 advisory. kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo...

Oracle Linux 9 : python3.9 (ELSA-2026-89742)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89742 advisory. - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 ...

bind security update

9.16.23-40.0.1.el98.12 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.12 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.16.23-40.11 - Backport 'Do not use headerprev in expirelruheaders' from upstream. RHEL-276913...

bind9.18 security update

32:9.18.29-14.11 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver...

bind security update

9.18.33-15.0.1.el102.13 - Hard require needed openssl-libs Orabug: 38742109 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-15.13 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.18.33-15.12 - Prevent assertion failure in dns6...

UBUNTU-CVE-2026-99032

In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smcgetname smcgetname dereferences smc-clcsock without holding clcsockreleaselock. Link-group termination can release the CLC socket through smccloseactiveabort while the SMC socket is still...

ALSA-2026:90492 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

CVE-2026-80766

A flaw was found in the Linux kernel's Human Interface Device HID uclogic driver. During the removal of a uclogic device, a timing issue allows the inrangetimer to be re-armed after it has been cancelled. This can lead to the timer attempting to access memory that has already been freed, resultin...

CVE-2026-80767

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. A use-after-free vulnerability exists where the enablesensor sysfs attribute can be accessed either before its associated memory is properly initialized or after it has been freed during device removal. A loca...