RockyLinux 8 : util-linux (RLSA-2026:1852)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1852 advisory. util-linux: util-linux: Heap buffer overread in setpwnam when processing 256-byte usernames CVE-2025-14104 Tenable has extracted the preceding description block...

MiracleLinux 8 : util-linux-2.32.1-48.el8_10 (AXSA:2026-146:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-146:02 advisory. util-linux: util-linux: Heap buffer overread in setpwnam when processing 256-byte usernames CVE-2025-14104 Tenable has extracted the preceding description blo...

AlmaLinux 8 : freerdp (ALSA-2026:2081)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2081 advisory. freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. CVE-2026-23530 freerdp: FreeRDP:...

Oracle Linux 8 : osbuild-composer (ELSA-2026-2124)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2124 advisory. 101.4-3.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image types...

RockyLinux 8 : resource-agents (RLSA-2026:1904)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1904 advisory. pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-23490 Tenable has extracted the preceding description block direct...

RockyLinux 8 : fence-agents (RLSA-2026:1906)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1906 advisory. pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-23490 Tenable has extracted the preceding description block direct...

CVE-2025-60753 affecting package libarchive for versions less than 3.6.1-8

CVE-2025-60753 affecting package libarchive for versions less than 3.6.1-8. A patched version of the package is available...

CVE-2025-58160 affecting package rpm-ostree for versions less than 2022.1-8

CVE-2025-58160 affecting package rpm-ostree for versions less than 2022.1-8. A patched version of the package is available...

MiracleLinux 8 : osbuild-composer-101.4-2.el8_10.ML.1 (AXSA:2026-143:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-143:02 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : python3-3.6.8-72.el8_10.ML.1 (AXSA:2026-133:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-133:01 advisory. cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service CVE-2025-12084 Tenable has extracted the preceding description blo...

Oracle Linux 8 : util-linux (ELSA-2026-1852)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1852 advisory. 2.32.1-48.0.1 - Orabug 35995159 - report lost loop device 2.32.1-48 - fix RHEL-134296 - libblkid: use snprintf instead of sprintf - fix RHEL-133946 - login-util...

OPENSUSE-SU-2026:10136-1 java-1_8_0-openjdk-1.8.0.482-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.482-1.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 8 : iperf3-3.5-12.el8_10 (AXSA:2026-126:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-126:02 advisory. iperf3: iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...

CVE-2026-1188 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9...

AlmaLinux 8 : iperf3 (ALSA-2026:1592)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1592 advisory. iperf3: iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

RockyLinux 8 : gimp:2.8 (RLSA-2026:1574)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1574 advisory. gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow CVE-2025-14422 Tenable has extracted the preceding description block directly from the...

RockyLinux 8 : grafana-pcp (RLSA-2026:1518)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1518 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descriptio...

spice-client-win security update

An update is available for spice-client-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Spice client MSI installers for Windows clients Security Fixes:...

Oracle Linux 8 : iperf3 (ELSA-2026-1592)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-1592 advisory. 3.5-12 - Resolves: RHEL-136175 - iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the Oracle Linux...

MiracleLinux 8 : grafana-pcp-5.1.1-11.el8_10 (AXSA:2026-104:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-104:01 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding...