MiracleLinux 9 : libXtst-1.2.3-16.el9_8.1 (AXSA:2026-2220:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2220:02 advisory. libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 Tenable has extracted the preceding description block direct...

Debian dla-4874 : eog - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4874 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4874-1 [email protected]...

MiracleLinux 9 : cjose-0.6.1-17.el9_8.2 (AXSA:2026-2222:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2222:02 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-119374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete that allows attackers to write past the leaf page buffer via crafted...

MiracleLinux 9 : libX11-1.8.12-1.el9_8.1 (AXSA:2026-2216:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2216:03 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the...

CentOS Linux 7 [TuxCare] Security Update: libvirt / libvirt-admin / libvirt-bash-completion / libvirt-client / etc (CENTOS7:CLSA-2026:1793178380)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793178380 advisory. - A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following...

Linux Distros Unpatched Vulnerability : CVE-2026-116566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated. CVE-2026-116566 Note that...

Fedora 45 : atuin (2026-ab1f2544f2)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ab1f2544f2 advisory. Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-120246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM...

CentOS Linux 7 [TuxCare] Security Update: gdb / gdb-doc / gdb-gdbserver (CENTOS7:CLSA-2026:1793179564)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793179564 advisory. - A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in...

Rocky Linux 8.6 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_1743)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261743 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.6. It addresses 11 CVEs: CVE-2026-31418, CVE-2022-49853, CVE-2026-63920,...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793163099)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793163099 advisory. - BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...

Fedora 45 : libreswan (2026-d06ae7ecc2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d06ae7ecc2 advisory. Fix automated passwordless ipsec import support for PKCS12 files ---- Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-94453 Tenabl...

Fedora 43 : btrfs-backup-ng (2026-28cd8623c6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-28cd8623c6 advisory. Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix GHSA-5xvm-66c9-p5ph, the 0.9.18 fix for...

openSUSE 16: gvfs / gvfs-backend-afc / gvfs-backend-goa / gvfs-backend-gphoto / etc (openSUSE-SU-2026:22174-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22174-1 advisory. This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership ...

openSUSE 16: rsyslog / rsyslog-devel / rsyslog-diag-tools / rsyslog-module-dtls / etc (openSUSE-SU-2026:22184-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22184-1 advisory. - CVE-2026-19654: imptcp regex-framing remote denial of service bsc1271910. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead...

Rocky Linux 10.2 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2026_89758)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689758 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer...

Fedora 45 : rust-cargo-rpmstatus (2026-90b83e11aa)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-90b83e11aa advisory. Rebuilt with updated rustls and webpki dependencies - Fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381,...

FreeBSD : amule -- multiple vulnerabilities (ac97113e-d514-11f1-b2f0-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ac97113e-d514-11f1-b2f0-002b67dfc673 advisory. aMule developers report: A security release first: it fixes 15 vulnerabilities reported through GitHub...

openSUSE 16 Security Update : python-Django (openSUSE-SU-2026:22196-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22196-1 advisory. Changes in python-Django: - CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset,...