Security update for nginx (important)

openSUSE security update: security update for nginx ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21439-1 Rating: important References: bsc1265228 bsc1267525 bsc1268492 bsc1268495 Cross-References: CVE-2026-40460 CVE-2026-42055 CVE-2026-48142 CVSS...

FreeBSD : unbound -- multiple vulnerabilities (f63b4b88-6901-4c12-b13d-5a821e25e9bf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f63b4b88-6901-4c12-b13d-5a821e25e9bf advisory. NLnet Labs reports: This release consolidates security fixes for issues reported over a period...

Fedora 43 : webkitgtk (2026-ec8e535c6e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec8e535c6e advisory. Fire scrollend event for instant programmatic scrolls. Increase network idle connection timeout to 115 seconds. Fix several crashes and rendering...

java-25-openjdk-25.0.4.0-1.1 on GA media (moderate)

java-25-openjdk-25.0.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11363-1 Rating: moderate Cross-References: CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 CVSS scores: CVE-2026-41254 SUSE : 2.9...

libsrt1_5-1.5.6-1.1 on GA media (moderate)

libsrt15-1.5.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11357-1 Rating: moderate Cross-References: CVE-2026-55868 CVE-2026-55869 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

Fedora 44 : xrdp (2026-9d3c766833)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d3c766833 advisory. Update PAM file to better match modern reality. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 43 : firefox (2026-6dab7a3eff)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6dab7a3eff advisory. - Update to latest upstream 153.0 ---- - New upstream release 153.0 ---- - Updated to latest upstream 153.0 Tenable has extracted the preceding...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: lerna, argo-workflows, authentik, nextcloud-server, vitess, gemini-cli, kibana, redisinsight, sqlpad, pelias-api, serve, actions-runner, thingsboard-fips, rancher-api-ui, authentik-fips, unleash-fips, opensearch-dashboards, saf, graalvm, prism, arangodb, renovate,...

GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: apache-hop, tez, seata, management-api-for-apache-cassandra-5.0, hadoop-fips, apache-hop-fips, thingsboard, tinkerpop...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, datahub-ingestion-fips, mlflow, jupyter-all-spark-notebook, awx, opal...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, datahub-ingestion-fips, mlflow, jupyter-all-spark-notebook, awx, opal...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, datahub-ingestion-fips, mlflow, jupyter-all-spark-notebook, awx, opal...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, datahub-ingestion-fips, mlflow, jupyter-all-spark-notebook, awx, opal...

CVE-2026-57497 vulnerabilities

Vulnerabilities for packages: rke2-runtime, k3s, spegel, kubo, ipfs-cluster-fips, ipfs-cluster, spegel-fips, rke2-runtime-fips...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: renovate, node-gyp, prism, sqlpad, npm, pulumi, saf, lerna, code-server, kubeflow-centraldashboard, opensearch-dashboards...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, timoni, crossplane-provider-aws-sns, gitness, crossplane-provider-aws-rds, crossplane-provider-aws-ec2, hugo, kubevela, crossplane-provider-aws-kinesis, crossplane-provider-azure-managedidentity,...

Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

DEBIAN-CVE-2026-64509

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...

DEBIAN-CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

DEBIAN-CVE-2026-64326

In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...