Photon OS 5.0: Dbus PHSA-2024-5.0-91-0208

An update of the dbus package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0208. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : mod_md-2.4.26-2.el9_8.1 (AXSA:2026-1444:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1444:01 advisory. httpd: modmd: unrestricted OCSP response leads to resource exhaustion CVE-2026-29168 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : libreswan (ELSA-2026-46397)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-46397 advisory. - Backport fix for CVE-2026-14957 RHEL-212107 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : perl-Archive-Tar (ELSA-2026-49523)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49523 advisory. - Fix CVE-2026-9538: cap per-entry declared size during archive reading to prevent memory DoS Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libreswan (ELSA-2026-46396)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-46396 advisory. - Backport fix for CVE-2026-14957 RHEL-212498 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Fedora 43 : nextcloud (2026-51116fe081)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51116fe081 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

gio-branding-upstream-2.88.3-1.1 on GA media (moderate)

gio-branding-upstream-2.88.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11415-1 Rating: moderate Cross-References: CVE-2026-15588 CVSS scores: CVE-2026-15588 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2026-15588 SUSE : 4.8...

Fedora 44 : exim (2026-94678c4b6e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-94678c4b6e advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : dokuwiki (2026-68853bb50c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-68853bb50c advisory. Backport some security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

CVE-2026-25707

A flaw was found in libzypp. A remote attacker could exploit a relative path traversal vulnerability when processing repository metadata. By supplying malicious repositories, an attacker could overwrite arbitrary files on the system. This could lead to privilege escalation or a denial of service...

Fedora 44 : dokuwiki (2026-d37b1b981a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d37b1b981a advisory. Backport some security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

RockyLinux 10 : nodejs-nodemon (RLSA-2026:48032)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:48032 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 Tenable has extracted the preceding description block...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.24-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

RockyLinux 8 : perl-IO-Compress (RLSA-2026:30858)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:30858 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding description...

RockyLinux 8 : python-urllib3 (RLSA-2026:36732)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...

Fedora 44 : systemd (2026-230ba36543)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-230ba36543 advisory. Latest upstream bugfix release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : google-osconfig-agent (2026-9781489c3a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9781489c3a advisory. Update to 20260717 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : skopeo (2026-9b2e56edf5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b2e56edf5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.26.5 which includes the fix. Tenable has extracted the precedi...

Fedora 43 : mupdf (2026-8870088088)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8870088088 advisory. fix CVE-2026-7233 rhbz2463402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 43 : libssh (2026-063caa9112)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-063caa9112 advisory. New upstream security release 2503148 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...