RockyLinux 9 : leapp-repository (RLSA-2026:67608)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67608 advisory. leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate- config as root and can load mysql-writable plugins...

RockyLinux 9 : curl (RLSA-2026:69126)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69126 advisory. curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to uncleared proxy authentication sta...

RHEL 9 : podman (RHSA-2026:69961)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69961 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

RHEL 9 : kernel (RHSA-2026:69908)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69908 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slab: do not limit zeroing...

AlmaLinux 9 : rsyslog (ALSA-2026:69540)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description block...

RockyLinux 9 : gstreamer1-plugins-base (RLSA-2026:69100)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

RockyLinux 9 : grafana (RLSA-2026:54184)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54184 advisory. grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 Tenable has extracted the preceding description blo...

RockyLinux 9 : openssh (RLSA-2026:69130)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

AlmaLinux 9 : openssh (ALSA-2026:69130)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

RockyLinux 9 : kernel (RLSA-2026:67470)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67470 advisory. kernel: vhost: move vdpa group bound check to vhostvdpa CVE-2026-43248 kernel: security/keys: fix missed RCU read section on lookup CVE-2026-64015 kerne...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

RHEL 9 : rhc (RHSA-2026:69105)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69105 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

RHEL 9 : libsoup (RHSA-2026:69297)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69297 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

RockyLinux 9 : perl-Net-DNS (RLSA-2026:68786)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68786 advisory. perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records CVE-2026-81928 Tenable has extracted the preceding description bloc...

RHEL 9 : sudo (RHSA-2026:69123)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69123 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

RHEL 9 : osbuild-composer (RHSA-2026:69293)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69293 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

RHEL 9 : curl (RHSA-2026:69126)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69126 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

Oracle Linux 9 : sudo (ELSA-2026-69123)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69123 advisory. 1.9.17p2-3.1 - CVE-2026-82474 sudo: execveat2 intercept/logsubcmds bypass Resolves: RHEL-255647 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-69098)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69098 advisory. 2.52.5-1 - Update to 2.52.5 2.52.4-1 - Update to 2.52.4 2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 -...