perl-Authen-SASL-2.210.0-1.1 on GA media (moderate)

perl-Authen-SASL-2.210.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11734-1 Rating: moderate Cross-References: CVE-2026-86219 CVSS scores: CVE-2026-86219 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-86219 SUSE : 9.1...

azure-storage-azcopy-10.32.8-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11740-1 Rating: moderate Cross-References: CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84304 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-84304 SUSE : 8.7...

perl-Protocol-HTTP2-1.140.0-1.1 on GA media (moderate)

perl-Protocol-HTTP2-1.140.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11735-1 Rating: moderate Cross-References: CVE-2026-16028 CVSS scores: CVE-2026-16028 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-16028 SUSE : 8.7...

Fedora 45 : golang-x-perf (2026-09a9388be9)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-09a9388be9 advisory. Update to 19be9d8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2026-89761

A flaw was found in the Linux kernel's AppArmor security module. An out-of-bounds write vulnerability exists when null terminating a label vector due to improper memory allocation. An unprivileged local attacker can exploit this by writing to specific system files, potentially leading to a denial...

AZL-100347 CVE-2026-89761 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

DEBIAN-CVE-2026-89761

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89761

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89761

CVE-2026-89761 is an out-of-bounds write in the Linux kernel's AppArmor security module. The function aa_vec_unique() writes a null terminator one entry past the end of the label vector because vec_setup() fails to reserve space for it when all label components are distinct. An unprivileged local...

ansible-creator-26.8.0-1.1 on GA media (moderate)

ansible-creator-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11729-1 Rating: moderate Cross-References: CVE-2026-31899 CVSS scores: CVE-2026-31899 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-31899 SUSE : 6.8...

PT-2026-90477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the AppArmor module when null terminating a label vector. The aa vec unique function attempts to place a terminator at vecn when no duplicates are found,...

Fedora 45 : tar (2026-ee1eb89e7b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee1eb89e7b advisory. Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracted the preceding description...

Fedora 45 : mingw-openexr (2026-94344a87fb)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-94344a87fb advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

cargo-audit-0.22.2~git0.281452c-3.1 on GA media (moderate)

cargo-audit-0.22.2git0.281452c-3.1 on GA media Announcement ID: openSUSE-SU-2026:11730-1 Rating: moderate Cross-References: CVE-2026-82247 CVE-2026-82250 CVE-2026-82251 CVE-2026-82253 CVE-2026-82254 CVSS scores: CVE-2026-82247 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-82247...

Fedora 45 : python-asteval (2026-79e569db98)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79e569db98 advisory. Update to 1.0.10 Resolves: rhbz2413249 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

AlmaLinux 9 : nginx (ALSA-2026:66542)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

EUVD-2026-75636

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

EUVD-2026-75177

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends...

GHSA-PCVC-8VRV-8Q6W Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...