DEBIAN-CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

EUVD-2026-52574

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

CVE-2026-14818

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

CVE-2026-3093 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips...

GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng-fips...

Vulnerabilities Resolved in Veeam Service Provider Console 9.3

All vulnerabilities documented in this article were resolved in Veeam Service Provider Console 9.3.0.35057. Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure...

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-2040)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2040 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.This issue affects BIND 9 versions 9.18.0 through 9.18.50,...

Amazon Linux 2 : python-tornado, --advisory ALAS2-2026-3847 (ALAS-2026-3847)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3847 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...

RockyLinux 8 : kernel (RLSA-2026:49214)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49214 advisory. kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master conntrack...

Amazon Linux 2 : python3-tornado, --advisory ALAS2-2026-3846 (ALAS-2026-3846)

The version of python3-tornado installed on the remote host is prior to 5.0.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3846 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...

Important: kernel-livepatch-6.18.30-61.116

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2026-2033)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2033 advisory. In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the...

SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:3453-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3453-1 advisory. Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information disclosure and deni...

alloy-1.18.0-1.1 on GA media (moderate)

alloy-1.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11438-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-33814 CVE-2026-41506 CVE-2026-41606 CVE-2026-41607 CVSS scores: CVE-2026-1229 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2026-1229 SUSE : 8.3...

golang-github-prometheus-prometheus-3.13.2-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.13.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11436-1 Rating: moderate Cross-References: CVE-2023-45289 CVE-2025-4673 CVE-2026-44990 CVE-2026-56852 CVSS scores: CVE-2023-45289 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2025-4673 SUSE...

Important: kernel-livepatch-6.18.36-69.134

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

Important: kernel-livepatch-6.1.172-216.339

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...