MozillaFirefox-153.0-1.1 on GA media (moderate)

MozillaFirefox-153.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11358-1 Rating: moderate Cross-References: CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358 CVE-2026-16359 CVE-2026-16360...

Security update for java-17-openjdk (important)

openSUSE security update: security update for java-17-openjdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21440-1 Rating: important References: bsc1264994 bsc1272223 bsc1272224 bsc1272225 bsc1272227 bsc1272228 bsc1272235 bsc1272236 bsc1272237...

Fedora 44 : xrdp (2026-9d3c766833)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d3c766833 advisory. Update PAM file to better match modern reality. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 43 : firefox (2026-6dab7a3eff)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6dab7a3eff advisory. - Update to latest upstream 153.0 ---- - New upstream release 153.0 ---- - Updated to latest upstream 153.0 Tenable has extracted the preceding...

java-25-openjdk-25.0.4.0-1.1 on GA media (moderate)

java-25-openjdk-25.0.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11363-1 Rating: moderate Cross-References: CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 CVSS scores: CVE-2026-41254 SUSE : 2.9...

libsrt1_5-1.5.6-1.1 on GA media (moderate)

libsrt15-1.5.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11357-1 Rating: moderate Cross-References: CVE-2026-55868 CVE-2026-55869 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: redisinsight, pelias-api, vitess, argo-workflows, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, wazuh-dashboard, prism, kibana, opensearch-dashboards-fips, graalvm, npm, opensearch-dashboards, pulumi, thingsboard, unleash-fips, sqlpad, renovate, arangodb,...

GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, hadoop-fips, tez, apache-hop-fips, seata, apache-hop, thingsboard...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...

CVE-2026-57497 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips, spegel, k3s, rke2-runtime, kubo...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: node-gyp, code-server, pulumi, npm, lerna, renovate, sqlpad, prism, saf, kubeflow-centraldashboard, opensearch-dashboards...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, gitness, crossplane-provider-aws-cloudfront, terraform-provider-grafana, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs,...

Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

DEBIAN-CVE-2026-64509

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...

DEBIAN-CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

DEBIAN-CVE-2026-64326

In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...

DEBIAN-CVE-2026-64330

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...