SUSE SLES15 Security Update : erlang (SUSE-SU-2026:3645-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3645-1 advisory. - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. - CVE-2026-42789: publickey application...

AlmaLinux 8 : php:8.2 (ALSA-2026:57574)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:57574 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archive...

ROS-20260821-73-0052

The vulnerabilities of the freezerapplystate and freezerchangestate functions in the kernel/cgroup/legacyfreezer.c module of the Linux operating system are related to the occurrence of mutual locking. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrit...

SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2026:3647-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3647-1 advisory. - CVE-2026-44943: remote file-write as root via discovery bsc1268353. - CVE-2026-44944: iscsiuio control-socke...

PT-2026-79346

Inappropriate Encoding for Output Context vulnerability in joshnuss xml builder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

The vulnerability of the _validate_webhook_url() function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform allows a attacker to perform an SSRF attack and gain unauthorized access to protected information.

The vulnerability of the validatewebhookurl function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform is related to insufficient validation of server-side requests. Exploiting this vulnerability could allow an attacker to perform an SSRF attack and gain...

PT-2026-79318

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.20.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description A Server-Side Request Forgery SSRF issue exists in the webhook module, which can be exploited through webhook delivery...

ROS-20260821-73-0004

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the use of a previously released resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0013

The vulnerability of the qla24xxbuildscsitype6iocbs function in the drivers/scsi/qla2xxx/qlaiocb.c module of the Linux SCSI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0048

The vulnerability of the fchmiscsetup function in the drivers/acpi/acpiapd.c module of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260821-73-0046

The vulnerability of the xfrmixmit function in the net/xfrm/xfrminterfacecore.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0011

The vulnerabilities of the functions qla4xxxsetchapentry and qla4xxxifacesetparam in the driver module drivers/scsi/qla4xxx/ql4os.c of the Linux SCSI device driver involve reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to cause a service failu...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102033 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC...

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:21592-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21592-1 advisory. Update to go1.25.13 released 2026-08-13, bsc1244485. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead...

PT-2026-80322

Vulnerability Details File: src/lib/addons/feature-event-formatter-md.ts Line: 355 in v8.0.1; format method Root Cause FeatureEventFormatterMd.format does: ts Mustache.escape = text = text; const text = Mustache.renderaction, context; mustache pinned ^4.2.0, confirmed installed 4.2.0 keeps escape...

php:8.2 security, bug fix, and enhancement update

libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102079 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: destroy stale expectfn expectations on unregister NAT helpers such as...

ROS-20260821-73-0012

The vulnerability of the functions rtw89coreregisterhw and rtw89pciprobe in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:3651-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3651-1 advisory. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713. Tenable has extract...

ROS-20260821-73-0072

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...