Photon OS 5.0: Go PHSA-2026-5.0-91-0960

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : dotnet9.0 (2026-7cfd54a4c1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7cfd54a4c1 advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

Fedora 44 : dotnet10.0 (2026-8b4cb2340a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8b4cb2340a advisory. Update to .NET SDK 10.0.111 and Runtime 10.0.11 Fixes:...

Important Photon OS Security Update - PHSA-2026-5.0-92-0969

Updates of 'openssl' packages of Photon OS have been released...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-55787)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55787 advisory. 1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625...

OPENSUSE-SU-2026:11564-1 perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 on GA media

These are all security issues fixed in the perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 package on the GA media of openSUSE Tumbleweed...

php:8.2 security, bug fix, and enhancement update

libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...

Fedora 44 : perl-DBI (2026-57dcf299cc)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-57dcf299cc advisory. 1.652 - Fix CVE-2026-73194 and CVE-2026-73193 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

OPENSUSE-SU-2026:11566-1 python313-GitPython-3.1.59-2.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.59-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11570-1 python313-django-allauth-65.19.1-1.1 on GA media

These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media

These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11563-1 ffmpeg-4-4.4.8-4.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.8-4.1 package on the GA media of openSUSE Tumbleweed...

go1.27-1.27rc3-1.1 on GA media (moderate)

go1.27-1.27rc3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11536-1 Rating: moderate Cross-References: CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 CVSS scores: CVE-2026-33818 SUSE : 7.5...

php:8.3 security, bug fix, and enhancement update

php 8.3.33-1 - rebase to 8.3.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...

Fedora 43 : dotnet9.0 (2026-9c8770dffb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9c8770dffb advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

UBUNTU-CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

UBUNTU-CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

USN-8659-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...