SUSE SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3047-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3047-1 advisory. This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-27145: crypto/x509:...

Linux Distros Unpatched Vulnerability : CVE-2026-43732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6,...

AlmaLinux 9 : python3.12 (ALSA-2026:39771)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39771 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

RHEL 8 : maven:3.8 (RHSA-2026:40841)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:40841 advisory. Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's buil...

RockyLinux 9 : python3.9 (RLSA-2026:39798)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39798 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Bug Fixes and Enhancements: python3.9 testssl...

RHEL 9 : rhc (RHSA-2026:39879)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39879 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Oracle Linux 8 : git-lfs (ELSA-2026-39266)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-39266 advisory. 3.4.1-12 - Rebuild with new Golang - Resolves: RHEL-187191 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Alibaba Cloud Linux 3 : 0202: gstreamer1-plugins-good (ALINUX3-SA-2026:0202)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0202 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-53705: A flaw was found in GStreamer's...

Alibaba Cloud Linux 3 : 0204: libxml2 (ALINUX3-SA-2026:0204)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0204 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-6170: A flaw was found in the interactive...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1938)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1938 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 In the Linux kernel, the following vulnerability has...

RockyLinux 8 : python3.12 (RLSA-2026:39893)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39893 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

Oracle Linux 10 : glibc (ELSA-2026-500006)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500006 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

MiracleLinux 8 : git-lfs-3.4.1-12.el8_10 (AXSA:2026-1269:09)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1269:09 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1929)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1929 advisory. tarfile.extractall with the 'data' or 'tar'filter could be bypassed by a crafted archive where a hardlinkreferences a symlink stored at a deeper name than the hardlink itself.The extraction...

RockyLinux 8 : git-lfs (RLSA-2026:39266)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39266 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : python3.12 (ELSA-2026-39893)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39893 advisory. 3.12.13-3 - Security fix for CVE-2026-15308 Resolves: RHEL-193776 Tenable has extracted the preceding description block directly from the Oracle Linux security...

SUSE SLES15 Security Update : yelp (SUSE-SU-2026:3037-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3037-1 advisory. This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via...

RockyLinux 10 : hplip (RLSA-2026:39976)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39976 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Not...

Oracle Linux 9 : python3.12 (ELSA-2026-39771)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39771 advisory. 3.12.13-3.0.1.el98.1 - Remove upstream URL reference 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 Tenable has extracted the precedi...

Alibaba Cloud Linux 3 : 0199: libtasn1 (ALINUX3-SA-2026:0199)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0199 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-13151: Stack-based buffer overflow in...