Oracle Linux 10 : libarchive (ELSA-2026-5063)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5063 advisory. 3.7.7-5 - Resolves: CVE-2026-4111 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

RockyLinux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2023:5998)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5998 advisory. python: TLS handshake bypass CVE-2023-40217 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that Nessus...

giflib-devel-32bit-5.2.2-3.1 on GA media (moderate)

giflib-devel-32bit-5.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:10326-1 Rating: moderate Cross-References: CVE-2026-23868 CVSS scores: CVE-2026-23868 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2026-23868 SUSE : 5.8...

Oracle Linux 9 : libvpx (ELSA-2026-4447)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-4447 advisory. 1.9.0-10 - Add patch for superindex full Resolves: RHEL-150344 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : libvpx (ELSA-2026-3967)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3967 advisory. 1.7.0-13 - Add patch for superframe index full Resolves: RHEL-150334 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

libblkid-devel-2.41.3-4.1 on GA media (moderate)

libblkid-devel-2.41.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:10288-1 Rating: moderate Cross-References: CVE-2026-3184 CVSS scores: CVE-2026-3184 SUSE : 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2026-3184 SUSE : 6.3...

Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2026-1463)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1463 advisory. libpng: An out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maxim...

OPENSUSE-SU-2026:10289-1 freetype2-devel-2.14.2-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : valkey (ELSA-2026-3443)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3443 advisory. 8.0.7-1 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 Tenable has extracted the preceding description block directly from the Oracle Linux...

libjxl-devel-0.11.2-1.1 on GA media (moderate)

libjxl-devel-0.11.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10271-1 Rating: moderate Cross-References: CVE-2026-1837 CVSS scores: CVE-2026-1837 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-1837 SUSE : 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2026:10271-1 libjxl-devel-0.11.2-1.1 on GA media

These are all security issues fixed in the libjxl-devel-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 8 : munge-0.5.13-3.el8_10 (AXSA:2026-219:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-219:01 advisory. MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Tenable has extracted the preceding descripti...

OPENSUSE-SU-2026:10244-1 libsignal-protocol-c-devel-2.3.3-2.1 on GA media

These are all security issues fixed in the libsignal-protocol-c-devel-2.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 : munge (ELSA-2026-3032)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3032 advisory. - Fix CVE-2026-25506 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Security update for openQA, os-autoinst, openQA-devel-container (important)

openSUSE security update: security update for openqa, os-autoinst, openqa-devel-container ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20261-1 Rating: important References: bsc1257852 Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547...

Security update for openQA, openQA-devel-container, os-autoinst (moderate)

openSUSE Security Update: Security update for openQA, openQA-devel-container, os-autoinst Announcement ID: openSUSE-SU-2026:0060-1 Rating: moderate References: 1257852 Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected...

Oracle Linux 10 : munge (ELSA-2026-3033)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3033 advisory. 0.5.15-11 - Fix CVE-2026-25506 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

virt:ol and virt-devel:ol security update

libvirt 6.0.0-28.1.0.1 - Add runtime deps for pkg librbd1 = 1:10.2.5 Keshav Sharma qemu-kvm 4.2.0-34.el83.5 - kvm-Drop-bogus-IPv6-messages.patch bz1939493 - Resolves: bz1939493 CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability...

PT-2026-8317

A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. The manipulation of the argument Password leads to unverified password change. The attack can be initiated remotely. T...

virt:ol and virt-devel:ol security and bug fix update

hivex 1.3.18-21 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 libvirt 6.0.0-35.1.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 - Add runtime deps for pkg librbd1 = 1:10.2.5 Keshav Sharma - Disable parallel builds Karl Heubaum 6.0.0-35.1.el8 -...