ALSA-2026:89830 Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

ALSA-2026:89923 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

python3.9 security update

3.9.25-7.0.1.el98.6 - Remove upstream URL reference 3.9.25-7.6 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 3.9.25-7.5 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext wh...

ALSA-2026:89748 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

ALSA-2026:90492 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

RHEL 9 : libreswan (RHSA-2026:89748)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89748 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

Linux Distros Unpatched Vulnerability : CVE-2026-98896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by...

CVE-2026-99053

In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipcnodefindbyname returns a node after dropping its RCU read lock without taking a reference. The LINKSET, LINKGET and LINKRESETSTATS handlers then lock and access the node,...

CVE-2026-99056

In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...

CVE-2026-99050

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpiompsseirqenable arms the poll worker before publishing it: schedulework runs before the worker is added to priv-workers. If gpiompssedisconnect walks the list in that windo...

bind security update

9.16.23-40.0.1.el98.12 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.12 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.16.23-40.11 - Backport 'Do not use headerprev in expirelruheaders' from upstream. RHEL-276913...

bind security update

9.18.33-15.0.1.el102.13 - Hard require needed openssl-libs Orabug: 38742109 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-15.13 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.18.33-15.12 - Prevent assertion failure in dns6...

CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

RHEL 9 : python3.9 (RHSA-2026:89742)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89742 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 8 : xorg-x11-server (RHSA-2026:89747)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89747 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

UBUNTU-CVE-2026-98982

In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child or parent. They carry DCACHENORCU and dentryfree frees them right aw...

About the security content of Safari 27.2

Download JSON About the security content of Safari 27.2 This document describes the security content of Safari 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

UBUNTU-CVE-2026-99056

In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...

CVE-2026-80766

A flaw was found in the Linux kernel's Human Interface Device HID uclogic driver. During the removal of a uclogic device, a timing issue allows the inrangetimer to be re-armed after it has been cancelled. This can lead to the timer attempting to access memory that has already been freed, resultin...

CVE-2026-80782

A flaw was found in the Magic Mouse Human Interface Device HID driver within the Linux kernel. When the hidinputconnect function fails to register an input device, the driver may continue to use a pointer to memory that has already been released. This use-after-free vulnerability can lead to syst...