Azul Zulu Java Multiple Vulnerabilities (2026-07-21)

The version of Azul Zulu installed on the remote host is 6 prior to 6.81.0.14 / 7 prior to 7.87.0.14 / 8 prior to 8.95.0.14 / 11 prior to 11.89.14 / 17 prior to 17.67.14 / 21 prior to 21.51.14 / 25 prior to 25.35.14 / 25 prior to 25.35.12 / 26 prior to 26.32.14. It is, therefore, affected by...

The vulnerability of the validate_push_nsh() function in the net_openvswitch/flow_netlink.c module, which is part of the Open vSwitch router support in Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the validatepushnsh function in the netopenvswitch/flownetlink.c module, which is part of the Open vSwitch router support in Linux operating systems, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

RHEL 8 : glibc (RHSA-2026:42733)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42733 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

Oracle Linux 10 : podman (ELSA-2026-38495)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38495 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

Debian dsa-6393 : ata-modules-6.12.90+deb13-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6393 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6393-1 [email protected] https://www.debian.org/securit...

AlmaLinux 8 : nodejs:22 (ALSA-2026:41947)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41947 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

AlmaLinux 9 : httpd (ALSA-2026:41906)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41906 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file...

ALSA-2026:42828 Important: httpd:2.4 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...

Oracle Linux 10 : golang (ELSA-2026-37436)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37436 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2730)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock !=...

RHEL 10 : kernel (RHSA-2026:42919)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42919 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - zero...

Security update for libkrun (important)

openSUSE Security Update: Security update for libkrun Announcement ID: openSUSE-SU-2026:0255-1 Rating: important References: 1270198 1270429 1270470 1270582 1270683 1270721 1270831 1270877 Cross-References: CVE-2025-24898 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898...

Security update for python-aiohttp (important)

openSUSE security update: security update for python-aiohttp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21372-1 Rating: important References: bsc1268398 bsc1268543 bsc1268544 bsc1268549 bsc1268556 bsc1268559 bsc1268560 bsc1268561...

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-2820)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reorderin...

RockyLinux 8 : webkit2gtk3 (RLSA-2026:42088)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42088 advisory. Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash...

Oracle Linux 10 : tomcat9 (ELSA-2026-36790)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36790 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks...

Debian dla-4692 : ctdb - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4692 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4692-1 [email protected]...

Oracle Linux 10 : tomcat (ELSA-2026-36788)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36788 advisory. - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Paddi...

HPESBNW05013 rev.1 - HPE Aruba Networking EdgeConnect SD-WAN Gateways, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Deletion, Creation and Deletion of Arbitrary Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking EdgeConnect SD-WAN Please refer to the Affected Products section for a complete list of product software impact...

libgit2-1_9-1.9.6-1.1 on GA media (moderate)

libgit2-19-1.9.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11315-1 Rating: moderate Cross-References: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed. Description...