EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4350)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-80514)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80514 advisory. - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 Tenable has extracted the preceding...

TencentOS Server 3: vim (TSSA-2026:1147)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1147 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4260)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-80510)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80510 advisory. 1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Tenable has extracted the preceding description block directl...

ALSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

AlmaLinux 10 : flatpak (ALSA-2026:80498)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80498 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

AlmaLinux 8 : flatpak (ALSA-2026:80687)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80687 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

Important: libX11

Issue Overview: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap. CVE-2026-88806 Affected Packages: libX11 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS...

RHEL 9 : compat-openssl11 (RHSA-2026:80514)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:80514 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-4068)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

Oracle Linux 8 : kernel (ELSA-2026-77498)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77498 advisory. - svcrdma: Reject inline replies that overflow the pull-up buffer Roberto Bergantinos Corpas RHEL-187743 CVE-2026-89530 - packet: use consistent...

ALSA-2026:80514 Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping...

ALSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

ALSA-2026:80510 Important: compat-openssl10 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1. Security Fixes: openssl:...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_77498)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677498 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send path...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping...