RockyLinux 10 : osbuild-composer (RLSA-2026:65895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

Fedora 46 : stb (2026-ee846faf9d)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee846faf9d advisory. Automatic update for stb-0^20260802.2c980bb-2.fc46. Changelog Thu Sep 10 2026 Benjamin A. Beasley - 0^20260802.2c980bb-2 - Patch stbsprintf: securit...

AlmaLinux 8 : kernel-rt (ALSA-2026:66324)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66324 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: scsi: target:...

RHEL 9 : kernel (RHSA-2026:66180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66180 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 ...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022363 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

AlmaLinux 8 : kernel (ALSA-2026:66000)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66000 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

RHEL 9 : httpd (RHSA-2026:66323)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66323 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022366 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0...

Amazon Linux 2 : containerd (ALASDOCKER-2026-140)

The version of containerd installed on the remote host is prior to 2.2.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-140 advisory. Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context.A...

Security Updates for Microsoft PowerPoint Products C2R (September 2026)

The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797, CVE-2026-80081 -...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS : Perl vulnerabilities (USN-8736-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8736-1 advisory. It was discovered that Perl incorrectly handled certain large inputs...

Oracle Linux 8 : ELSA-2026-64791-0: / 389-ds:1.4 (ELSA-2026-647910)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647910 advisory. - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results...

Fedora 46 : rubygems (2026-c77b963cc9)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c77b963cc9 advisory. Automatic update for rubygems-4.0.20-1.fc46. Changelog Thu Sep 3 2026 Mamoru TASAKA - 4.0.20-1 - Update to RubyGems 4.0.20 - Backport ruby upstream...

The vulnerability of the SOGo collaboration software, related to the handling of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the Alinto SOPE framework and the SOGo software for collaborative work is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

kernel security, bug fix, and enhancement update

4.18.0-553.162.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

PT-2026-89500

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

389-ds:1.4 security, bug fix, and enhancement update

1.4.3.39-28 - Bump version to 1.4.3.39-28 - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USEONEBACKEND control in opsharedsearch rhel-8.10.z - Resolves: RHEL-220511 - EMBARGOED CVE-2026-1835...

glibc security update

2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni Oracle history: Jul-15-2026 Cupertino Miranda - 2.39-126.0.1 - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi Jul-15-2026 Cupertino Miranda - 2.39-124.0.1 - Forward port Oracle changes t...

RHEL 10 : vim (RHSA-2026:66336)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66336 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of servic...

Fedora 44 : freerdp2 (2026-d91338eea8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91338eea8 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...