Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792572593)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792572593 advisory. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size...

Linux Distros Unpatched Vulnerability : CVE-2026-113201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted...

RHEL 8 : kernel (RHSA-2026:79782)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:79782 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nvmet: fix pre-auth...

Linux Distros Unpatched Vulnerability : CVE-2026-113066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-113325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromiu...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: flatpak (UTSA-2026-142347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142347 advisory. In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code executi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142328 advisory. An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable has extracted th...

RHEL 8 : perl-DBI:1.641 (RHSA-2026:85916)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85916 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

Linux Distros Unpatched Vulnerability : CVE-2026-103658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserv...

ALSA-2026:86983 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

php security update

8.0.30-8.1 - Fix FILTERSANITIZEENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN...

Linux Distros Unpatched Vulnerability : CVE-2026-113006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via ...

Linux Distros Unpatched Vulnerability : CVE-2026-113144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromiu...

Google Chrome < 156.0.8078.47 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop02018666648 advisory. - Use after free in Performance. CVE-2026-113344 - Use after free i...

Linux Distros Unpatched Vulnerability : CVE-2026-109243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepe...

PT-2026-120788

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.15 Apache Traffic Server versions 10.0.0 through 10.1.4 Apache Traffic Server version 10.2.0 Description The experimental tsmemcache plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-109253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming...

PowerDNS -- Multiple vulnerabilities

PowerDNS reports: CVE-2026-73206: A crafted DNS packet can cause a denial of service decompressing the DNS names in the packet CVE-2026-73205: A malicious client can cause too many TCP connections in TIMEWAIT state CVE-2026-85555: DNSSEC validation bypass and cache poisoning in PowerDNS Recursor...

Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...