Important: kernel-livepatch-5.10.251-248.983

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other issues in Amazon Linux kernels: https://aws.amazon.com/security/security-bulletins/2026-027-aws/ CVE-2026-43284 Affected Packages:...

Malicious Package

Overview @w3m-frame/sessionupdate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Fedora 42 : vhs (2026-795b0d0367)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-795b0d0367 advisory. Rebuild with golang 1.25.9 to pick up multiple security fixes. Tenable has extracted the preceding description block directly from the Fedora securi...

Fedora 44 : python3.6 (2026-a335d04675)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a335d04675 advisory. - Security fixes for CVE-2026-4786, CVE-2026-6100 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 44 : emacs (2026-49b8ca7981)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-49b8ca7981 advisory. Fix CVE-2026-6861: memory corruption vulnerability when processing SVG CSS. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 42 : xdg-dbus-proxy (2026-adc66b374a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-adc66b374a advisory. Update the package, including fix for CVE-2026-34080. See also: upstream security advisory Tenable has extracted the preceding description block directly fro...

Fedora 44 : python3.9 (2026-f7b3ebe324)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f7b3ebe324 advisory. Security fix for CVE-2026-4519. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : libarchive (2026-b42b8b1c00)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b42b8b1c00 advisory. CVE-2026-4111 libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archivereaddata in libarchive Tenable has extracted the preceding...

Fedora 44 : libpng12 (2026-3adf4e38cb)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3adf4e38cb advisory. fix CVE-2026-25646: heap buffer overflow in pngsetquantize Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : mupdf (2026-0ebdbc98c5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0ebdbc98c5 advisory. fix CVE-2026-3308 rhbz2454361 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 44 : mingw-python3 (2026-f04915ebfd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f04915ebfd advisory. Backport fix for CVE-2026-4786. ---- Backport fixes for CVE-2026-6100, CVE-2026-3479, CVE-2026-1502 Tenable has extracted the preceding description...

Fedora 42 : PackageKit (2026-41926fe792)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-41926fe792 advisory. Backport fix for race condition leading to root compromise GHSA-f55j-vvr9-69xv Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : libpng15 (2026-bcba077d11)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bcba077d11 advisory. fix CVE-2026-25646: heap buffer overflow in pngsetquantize Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : mingw-python3 (2026-763e814afa)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-763e814afa advisory. Backport fix for CVE-2026-4786. ---- Backport fixes for CVE-2026-6100, CVE-2026-3479, CVE-2026-1502 Tenable has extracted the preceding description...

Fedora 42 : minetest (2026-036e523144)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-036e523144 advisory. 5.15.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 44 : awstats (2026-649970e065)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-649970e065 advisory. Fix CVE-2025-63261 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : python-pillow (2026-334e385bd4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-334e385bd4 advisory. Fix CVE-2026-40192. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 42 : tinyproxy (2026-d67a979089)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d67a979089 advisory. Backport upstream fixes for CVE-2026-3945 and CVE-2026-31842. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : tinyproxy (2026-d8daf8790f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8daf8790f advisory. Backport upstream fixes for CVE-2026-3945 and CVE-2026-31842. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 42 : awstats (2026-29b65f46e8)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-29b65f46e8 advisory. Fix CVE-2025-63261 rhbz 2450261 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...