Medium: containerd

Issue Overview: containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3168)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3168 advisory. containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in...

Important: fetchmail

Issue Overview: A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM...

Rocky Linux 8.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1609)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261609 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 8.6. It addresses 31 CVEs: CVE-2021-32027, CVE-2012-3489, CVE-2007-0555,...

Rocky Linux 9.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc Multiple Vulnerabilities (ciqsa-2026_1620)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261620 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.6. It addresses 17 CVEs: CVE-2016-7076, CVE-2012-0809, CVE-2013-1775, CVE-2015-560...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2026-122)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-122 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root...

Rocky Linux 8.6 [CIQ] Security Update: dbus / dbus-common / dbus-daemon / dbus-devel / dbus-libs / etc Multiple Vulnerabilities (ciqsa-2026_1596)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261596 advisory. This advisory aggregates security fixes for the dbus SRPM in CIQ LTS 8.6. It addresses 16 CVEs: CVE-2014-3636, CVE-2014-3477, CVE-2014-3637, CVE-2014-353...

Rocky Linux 8.6 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1608)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261608 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 8.6. It addresses 13 CVEs: CVE-2012-2386, CVE-2013-4248, CVE-2013-4113, CVE-2012-2329...

Rocky Linux 8.6 [CIQ] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (ciqsa-2026_1595)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261595 advisory. This advisory aggregates security fixes for the gcc SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2019-15847, CVE-2020-11023. Tenable has extracted the...

Rocky Linux 9.6 [CIQ] Security Update: ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc Multiple Vulnerabilities (ciqsa-2026_1637)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261637 advisory. This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.6. It addresses 97 CVEs: CVE-2018-1050, CVE-2020-10760, CVE-2013-4475,...

ROS-20261012-73-0265

The vulnerability of the xen-netback component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0255

The vulnerability of the mtk-svs.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261012-73-0260

The vulnerability of the cpcap-battery.c component in the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0238

The vulnerability of the act8945acharger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0240

The vulnerability of the pinctrl-single.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0242

The vulnerability of the st33zp24 component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

Medium: oci-add-hooks

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-123)

The version of oci-add-hooks installed on the remote host is prior to 0-0.11.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-123 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to location...

Rocky Linux 9.2 [CIQ] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ciqsa-2026_1613)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261613 advisory. This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.2. It addresses 88 CVEs: CVE-2018-1050, CVE-2020-10760, CVE-2013-4475,...

EulerOS 2.0 SP13 : util-linux (EulerOS-SA-2026-4112)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...