Oracle Linux 9 : PackageKit (ELSA-2026-19354)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

SUSE SLES15 Security Update : kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:2989-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2989-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: ...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-19049)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19049 advisory. - rebuilt to fix CVE-2026-27137, CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : cups (ELSA-2026-39316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39316 advisory. 1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : libreoffice (ELSA-2026-36832)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36832 advisory. - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation Tenable has extracted the preceding description block directly fro...

Oracle Linux 7 : 389-ds-base (ELSA-2026-26453)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26453 advisory. - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-14905 Orabug: 39146844 Tenable has extracted the preceding description block...

PT-2026-60396

Name of the Vulnerable Software and Affected Versions Zoom Clients for Windows affected versions not specified Description A time-of-check to time-of-use TOCTOU race condition exists in the installation and uninstallation process. This flaw allows an authenticated local user to escalate privilege...

RHEL 9 : libxml2 (RHSA-2026:39317)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39317 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

Oracle Linux 10 : python3.14 (ELSA-2026-19019)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19019 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Security fixes for CVE-2026-2297...

Oracle Linux 9 : git-lfs (ELSA-2026-39319)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-39319 advisory. 3.7.1-4.2 - Rebuild with new Golang - Resolves: RHEL-187329 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : gstreamer1-plugins-bad-free, / gstreamer1-plugins-base, / gstreamer1-plugins-good, / and / gstreamer1-plugins-ugly-free (ELSA-2026-19024)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19024 advisory. - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Add patch for CVE-2026-2921 Resolves: RHEL-156122...

Oracle Linux 10 : libssh (ELSA-2026-18160)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18160 advisory. 0.12.0-2 - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 0.12.0-1 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825,...

Oracle Linux 10 : golang (ELSA-2026-19022)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19022 advisory. 1.26.2-2.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.2-2 - Do not ignore any tests in check 1.26.2-1 - Update to Go 1.26.2 fips-2...

AlmaLinux 10 : python3.12 (ALSA-2026:39183)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39183 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

Oracle Linux 7 : host-metering (ELSA-2026-16101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-16101 advisory. 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233 Tenable has extracted the preceding description block directly fro...

AlmaLinux 8 : pacemaker (ALSA-2026:39322)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39322 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : alsa-lib vulnerability (USN-8538-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8538-1 advisory. It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to cause alsa-lib to...

RockyLinux 8 : pacemaker (RLSA-2026:39322)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39322 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...

RockyLinux 10 : cups (RLSA-2026:39302)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39302 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has extracted...

Debian dla-4683 : libwolfssl-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4683 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4683-1 [email protected]...