Fedora 42 : poppler (2026-2bdb132e40)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2bdb132e40 advisory. This update fixes CVE-2025-52885 and CVE-2025-43718 Tenable has extracted the preceding description block directly from the Fedora security advisory...

TencentOS Server 3: freerdp (TSSA-2026:0361)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0361 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

nano-9.0-2.1 on GA media (moderate)

nano-9.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10851-1 Rating: moderate Cross-References: CVE-2026-6842 CVE-2026-6843 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the nano-9.0-2...

SUSE-SU-2026:2021-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...

Security update for rsync (important)

openSUSE security update: security update for rsync ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20754-1 Rating: important References: bsc1254441 bsc1262223 Cross-References: CVE-2025-10158 CVE-2026-41035 CVSS scores: CVE-2025-10158 SUSE : 4.3...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20743-1 Rating: important References: bsc1264449 bsc1264450 Cross-References: CVE-2026-43284 CVE-2026-43500 CVSS scores: CVE-2026-43284 SU...

RHEL 9 : jq (RHSA-2026:18045)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:18045 advisory. jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or...

RockyLinux 8 : krb5 (RLSA-2026:16799)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:16799 advisory. krb5: MIT Kerberos 5 krb5: Denial of Service via integer underflow and out-of-bounds read CVE-2026-40356 krb5: MIT Kerberos 5: Denial of Service via NUL...

CLSA-2025-1762538558 containernetworking-plugins: Fix of 13 CVEs

rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing...

Important: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libmodsecurity3-3.0.15-1.1 on GA media (moderate)

libmodsecurity3-3.0.15-1.1 on GA media Announcement ID: openSUSE-SU-2026:10732-1 Rating: moderate Cross-References: CVE-2026-30923 CVE-2026-42268 CVSS scores: CVE-2026-30923 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-30923 SUSE : 8.2...

libpcp-devel-6.3.8-1.1 on GA media (moderate)

libpcp-devel-6.3.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:10705-1 Rating: moderate Cross-References: CVE-2024-45769 CVE-2024-45770 CVSS scores: CVE-2024-45769 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-45769 SUSE : 5.7...

PT-2026-38908

Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with AllowAnonymous, allowing completely unauthenticated access to page images from any chapter in any library. While the endpoint accepts an apiKey parameter, it is never validated. Sin...

Fedora 43 : nano (2026-d0a0f1c3d2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d0a0f1c3d2 advisory. fix CVE-2026-6842 and CVE-29026-6843 Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: rhbz2455127 Resolves: rhbz2455314 Tenable has extract...

CLSA-2026-1777645704 java-17-openjdk: Fix of 2 CVEs

Update to jdk-17.0.19+10 RHSA-2026:9686 - Set fipsver to 62c0f885e30 - CVE-2026-22016: fix JAXP component vulnerability allowing unauthenticated remote attackers to gain unauthorized access to sensitive data in Java SE - CVE-2026-34282: fix Hotspot component vulnerability allowing unauthorized...

corosync security update

An update is available for corosync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for Roc...

golang-github-prometheus-prometheus-3.11.3-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.11.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10676-1 Rating: moderate Cross-References: CVE-2026-42151 CVE-2026-42154 CVSS scores: CVE-2026-42151 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-42154 SUSE : 7.5...

RHCOS 1 : rubygem-passenger (RHSA-2013:1136)

The remote Red Hat Enterprise Linux CoreOS 1 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1136 advisory. - rubygem-passenger: incorrect temporary file usage CVE-2013-2119 - rubygem-passenger: insecure temporary directory usage due to reu...

RHCOS 3 : OpenShift Container Platform 3.7 (RHSA-2018:2906)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2906 advisory. - atomic-openshift: oc patch with json causes masterapi service crash CVE-2018-14632 - kubernetes: authentication/authorization bypa...

CLSA-2026-1777683406 sssd: Fix of 2 CVEs

CVE-2018-10852: create the sudo responder socket with stricter permissions - CVE-2019-3811: do not return "/" as the home directory when the user has no homedir configured...