Oracle Linux 10 : openexr (ELSA-2026-38499)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38499 advisory. - fix CVE-2026-41142 - fix CVE-2026-42216 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Important: kernel-livepatch-6.18.30-61.119

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 Affected Packages: kernel-livepatch-6.18.30-61.119 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Fedora 43 : mingw-python-pip (2026-71562f8836)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-71562f8836 advisory. Update to pip-26.1.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 10 : php8.4 (ELSA-2026-22649)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22649 advisory. 8.4.21-2 - rebase to 8.4.21 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Fedora 43 : antlr4-project (2026-d9ca28a7b8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d9ca28a7b8 advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : opam (2026-fb48505840)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb48505840 advisory. Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information. Tenable has extracted the preceding...

Fedora 43 : python-orjson (2026-c8f1a4ee05)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c8f1a4ee05 advisory. Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : spoofdpi (2026-812049f95c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-812049f95c advisory. Update spoofdpi to 1.5.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : ruby (2026-7b7c2b373e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b7c2b373e advisory. Ruby 3.4.10 is released. This new version contains severay security bug fixes in zlib, net-imap and erb.. Tenable has extracted the preceding...

Fedora 43 : node-exporter (2026-5924722657)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5924722657 advisory. Update to 1.12.1 ---- Update to 1.12.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Oracle Linux 10 : gdk-pixbuf2 (ELSA-2026-19127)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19127 advisory. 2.42.12-5 - jpeg: Reject unsupported number of components Tenable has extracted the preceding description block directly from the Oracle Linux security...

RockyLinux 8 : python3.12 (RLSA-2026:39893)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39893 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

Fedora 43 : python-bcrypt (2026-31ec71cf0b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-31ec71cf0b advisory. Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177 Tenable has extracted the preceding description block directly from the Fedora securit...

Oracle Linux 8 : python3.12 (ELSA-2026-39893)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39893 advisory. 3.12.13-3 - Security fix for CVE-2026-15308 Resolves: RHEL-193776 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 44 : rust-opendal (2026-e465328a8d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e465328a8d advisory. Update quick-xml to 0.41 RUSTSEC-2026-0194, RUSTSEC-2026-0195 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 45 : ruby (2026-7f499e0362)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f499e0362 advisory. Ruby 4.0.6 is released. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2026-58886

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description Notepad++ fails to perform path normalization when validating the backupFilePath attribute from session.xml using the std::wstring::starts with function. This allows the use of parent-directory...

SUSE SLES15: kubernetes1.33-client / kubernetes1.33-client-bash-completion / etc (SUSE-SU-2026:2965-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2965-1 advisory. This update for kubernetes-old rebuilds it against the current go security release. Tenable has extracted the preceding description block...

Oracle Linux 9 : PackageKit (ELSA-2026-19354)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...