Oracle Linux 8 : ELSA-2026-62407-0: / grafana (ELSA-2026-624070)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-624070 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-219393: CVE-2026-42127 Tenable has extracted t...

Fedora 43 : freerdp (2026-e0f5d28f57)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0f5d28f57 advisory. Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...

Debian dsa-6482 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6482 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6482-1 [email protected] https://www.debian.org/securit...

openSUSE 16: orthanc / orthanc-authorization / orthanc-devel / orthanc-dicomweb / etc (openSUSE-SU-2026:21728-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21728-1 advisory. Changes in orthanc: - Version 1.13.0 Highlights: complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded. The...

openSUSE 16: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / libgegl-0_4-0 / etc (openSUSE-SU-2026:21731-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21731-1 advisory. Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229 Tenable has extracted the preceding description block directly from t...

grafana-pcp security update

5.3.0-8.1 - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 5.3.0-8 - Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build...

perl-GD security update

2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...

java-21-openjdk security update

1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625 1:21.0.12.1.1-1.1 - Update to jdk-21.0.12.1+1 GA - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - This...

ALSA-2026:63022 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...

grafana security update

10.2.6-28.5 - Rebuild against updated golang - Resolves RHEL-241197 - Resolves RHEL-241426 - Resolves RHEL-241690 - Resolves RHEL-241975 - Resolves RHEL-242171 - Resolves RHEL-242372 - Resolves RHEL-251690 - Resolves RHEL-251818...

grafana-pcp security update

5.1.1-18 - Rebuild against updated golang - Resolves RHEL-241670 - Resolves RHEL-242385 - Resolves RHEL-242345 - Resolves RHEL-242223 5.1.1-17 - Resolves RHEL-188284: Remove Lua ExclusiveArch macro for Konflux build...

image-builder security update

72.0.0-1.0.1 - Adopt upstream image-builder 72.0.0 tarball and spec file Orabug: 39666668 - Adopt Oracle Linux Support merged upstream in PR 2404...

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...

Oracle Linux 9 : ELSA-2026-61903-0: / php:8.2 (ELSA-2026-619030)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-619030 advisory. php 8.2.33-1 - rebase to 8.2.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040...

glibc-2.44-1.1 on GA media (moderate)

glibc-2.44-1.1 on GA media Announcement ID: openSUSE-SU-2026:11660-1 Rating: moderate Cross-References: CVE-2026-6368 CVE-2026-6791 CVSS scores: CVE-2026-6368 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2026-6791 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Affected...

Fedora 44 : proftpd (2026-f073efe2f3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f073efe2f3 advisory. Current upstream maintenance release, with a handful of potentially security-related bugfixes. Tenable has extracted the preceding description block directly...

Fedora 43 : gvfs (2026-571b7e1505)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-571b7e1505 advisory. Fix CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, and CVE-2026-84270 Tenable has extracted the preceding description block directly from the Fedor...