ROOT-APP-MAVEN-CVE-2025-49146 CVE-2025-49146 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2025-49146 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-6.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 44 Update: curl-8.18.0-10.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

PT-2026-90707

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.653 Description An issue in DBD::DBM allows the loading of arbitrary modules because the dbm type and dbm mldbm connect attributes are passed to the require function without validation. Since require treats path-shaped...

Oracle Linux 9 : ELSA-2026-65886-0: / image-builder (ELSA-2026-658860)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-658860 advisory. 72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499,...

Linux Distros Unpatched Vulnerability : CVE-2026-46352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

PT-2026-96067

Root has patched GHSA-xx4c-jj58-r7x6 in the validator package for Root:npm. Multiple fixed versions available...

PT-2026-90141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap read exists in the hp-bioscfg component of the x86 platform. The function hp init bios package attribute validates the obj-package.count but subsequently calls hp...

OPENSUSE-SU-2026:11761-1 tomcat11-11.0.25-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed...

image-builder security update

72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

Fedora 45 : memcached (2026-fb82981047)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb82981047 advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 9 : ELSA-2026-65153-0: / osbuild-composer (ELSA-2026-651530)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651530 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...

PT-2026-89809

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

CVE-2026-54174: Improper Validation of Integrity Check Value

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files tha...

Fedora 45 : gdk-pixbuf2 (2026-f55d6fc9f8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f55d6fc9f8 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...

Fedora 45 : rest (2026-4baee57e28)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4baee57e28 advisory. Fix for https://access.redhat.com/security/cve/cve-2026-16615 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Linux Distros Unpatched Vulnerability : CVE-2026-49836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...

Oracle Linux 10 : ELSA-2026-65895-0: / osbuild-composer (ELSA-2026-658950)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-658950 advisory. 176-1.0.2 - Rebuild for CVE-2026-33810, CVE-2026-33818, CVE-2026-39820, CVE-2026-42499,CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-5685...

Fedora 45 : freerdp (2026-d2a288c8eb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d2a288c8eb advisory. Update to 3.31.1 ---- Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CVE-2026-49836

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...