OPENSUSE-SU-2026:20501-1 Security update for glibc

This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response bsc1260078. - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions bsc1260082. Other fixes: - nss: Missing checks in...

Oracle Linux 8 : thunderbird (ELSA-2026-6917)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-6917 advisory. 140.9.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.9.0 - Add OpenELA debranding 140.9.0-1 - Update to 140.9.0 ESR Tenab...

Photon OS 5.0: Nss PHSA-2026-5.0-0801

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0801. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid30512...

CVE-2026-34397

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...

EUVD-2026-17983

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...

PT-2026-29576

Name of the Vulnerable Software and Affected Versions Himmelblau versions 2.0.0-alpha through 2.3.8 and 3.0.0-alpha through 3.1.0 Description Himmelblau, an interoperability suite for Microsoft Azure Entra ID and Intune, contains a conditional local privilege escalation issue due to an edge-case...

[SECURITY] Fedora 42 Update: nss-3.121.0-1.fc42

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 44 Update: nss-3.121.0-1.fc44

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora 42 : firefox / nss (2026-49237e1ced)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-49237e1ced advisory. Update NSS to 3.121.0 Update to Firefox 149.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 44 : nss (2026-367d9a0b61)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-367d9a0b61 advisory. Update NSS to 3.121.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 10 : firefox (ELSA-2026-5931)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-5931 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Linux Distros Unpatched Vulnerability : CVE-2026-4727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149. CVE-2026-4727 Note that Nessus relies on t...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0801

Updates of 'mozjs', 'nss' packages of Photon OS have been released...

Debian: Security Advisory (DLA-4508-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : firefox / nss (2026-d8099dd719)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8099dd719 advisory. Update NSS to 3.121.0 Update to Firefox 149.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 The principle is fairly simple: the -R option i...

Debian dla-4508 : libnss3 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4508 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4508-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-4727 Denial-of-service in the Libraries component in NSS

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

ROOT-OS-UBUNTU-2404-CVE-2026-2781 CVE-2026-2781 in rootio-nss - Patched by Root

Root has patched CVE-2026-2781 in the rootio-nss package for Root:Ubuntu:24.04. Multiple fixed versions available...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2026-1447)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...