Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101972 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2063 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : tomcat, --advisory ALAS2-2026-3864 (ALAS-2026-3864)

The version of tomcat installed on the remote host is prior to 7.0.76-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3864 advisory. Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds usi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102003 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that struct...

Amazon Linux 2023 : spice-vdagent (ALAS2023-2026-2061)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2061 advisory. A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer...

RockyLinux 8 : postgresql:12 (RLSA-2026:52396)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52396 advisory. postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 Tenable has extracted the preceding description block...

CVE-2021-43717

Epson iProjection.apk v3.2.6 on the EH-TW5350 projector (firmware 150075647YWWV110) contains hard-coded credentials, allowing anyone who discovers a networked iProjection projector to authenticate and control it maliciously. Discovered by KITRI BoB team B-BEAM-BOB in 2021; no public exploit code ...

TencentOS Server 4: libsoup3 (TSSA-2026:0839)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0839 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI...

Linux Distros Unpatched Vulnerability : CVE-2026-74267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever codel drops packets during peek, it calls...

ALSA-2026:56007 Important: mysql8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fixes: mysql:...

RHEL 9 : pcp (RHSA-2026:55740)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55740 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

pcp security update

5.3.7-22.0.12.el810.5 - Implemented units header in csv output using pmrepOrabug: 39064482 - Adds interval option support in PCP nfsiostat tool Orabug: 38902336 - Introduces proc.numamaps metrics in linuxproc PMDA Orabug: 38509848 - adds numastat process option in the tool - Added support for siz...

TencentOS Server 3: vim (TSSA-2026:0857)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0857 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101974)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101974 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated R...

RHEL 8 : nghttp2 (RHSA-2026:55804)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55804 advisory. libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101987 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with dropprogress and zero droplevel BUG When recovering relocation at...

About the security content of Safari 26.6.1

About the security content of Safari 26.6.1 This update delivers security fixes that were first made available in the macOS Golden Gate 27 beta. This document describes the security content of Safari 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose,...

RHEL 8 : haproxy (RHSA-2026:55862)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55862 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProx...

RHEL 8 : redhat-ds:11 (RHSA-2026:56047)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56047 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...