AlmaLinux 9.6 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.6:CLSA-2026:1792176855)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792176855 advisory. - A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via...

AlmaLinux 10 : rpcbind (ALSA-2026:83561)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:83561 advisory. rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service CVE-2026-94640 Tenable has extracted the...

AlmaLinux 9 : ghostscript (ALSA-2026:83553)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83553 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

AlmaLinux 9.2 [TuxCare] Security Update: pcs / pcs-snmp (ALMALINUX9.2:CLSA-2026:1792144466)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792144466 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 8 : rpcbind (ALSA-2026:83563)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:83563 advisory. rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service CVE-2026-94640 Tenable has extracted the...

ALSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...

AlmaLinux 10 : ghostscript (ALSA-2026:83551)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83551 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

AlmaLinux 9 : nodejs:22 (ALSA-2026:76750)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76750 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequested...

AlmaLinux 8 : ghostscript (ALSA-2026:83552)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83552 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

AlmaLinux 9 : libreoffice (ALSA-2026:82013)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82013 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

AlmaLinux 8 : kernel-rt (ALSA-2026:83159)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83159 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytese...

AlmaLinux 9 : kernel (ALSA-2026:81552)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:81552 advisory. kernel: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise CVE-2026-46309 kernel: macsec: fix replay protection at XPN lower-PN wrap...

AlmaLinux 8 : kernel (ALSA-2026:83157)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83157 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytese...

AlmaLinux 8 : lrzsz (ALSA-2026:83525)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:83525 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via craft...

AlmaLinux 8 : nodejs:24 (ALSA-2026:74085)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74085 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificate...

AlmaLinux 10 : tftp (ALSA-2026:82280)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:82280 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : kernel-rt (ALSA-2026:82806)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82806 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...

AlmaLinux 8 : kernel (ALSA-2026:82807)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82807 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...

AlmaLinux 9 : xorg-x11-server (ALSA-2026:82015)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82015 advisory. xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests CVE-2026-93521 xorg-x11-server: xwayland:...

AlmaLinux 9 : kernel (ALSA-2026:77689)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77689 advisory. kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel:...