MGASA-2026-0455 Updated python3 & python-pip package fixes security vulnerabilities

Please see the references for additional information about vulnerabilities...

FreeBSD : p5-YAML-Syck -- Multiple vulnerabilities (501ff33c-b996-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 501ff33c-b996-11f1-ad2b-40b034429ecf advisory. YAML-Syck project reports: YAML-Syck 1.47 fix the following issues: Tenable has extracted the...

Fedora 43 : libheif (2026-022ff83e3e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-022ff83e3e advisory. Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.5 . Tenable has extracted the...

ROOT-APP-MAVEN-CVE-2026-34360 CVE-2026-34360 in ca.uhn.hapi.fhir:org.hl7.fhir.core - Patched by Root

Root has patched CVE-2026-34360 in the ca.uhn.hapi.fhir:org.hl7.fhir.core package for Root:Maven. Multiple fixed versions available...

Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated

A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…...

Fedora 46 : golang-x-image (2026-2d6aee1dc4)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2d6aee1dc4 advisory. Automatic update for golang-x-image-0.46.0-2.fc46. Changelog Fri Sep 25 2026 lex Sez - 0.46.0-2 - Add requiresexclude Fri Sep 25 2026 Packit -...

FreeBSD : databases/p5-DBI -- multiple vulnerabilities (675bc714-b8cd-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 675bc714-b8cd-11f1-ad2b-40b034429ecf advisory. DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: Tenabl...

PT-2026-105458

TuxCare rebuilt 123 packages to address 8 CVEs. Fixed in 11.0.33.tuxcare0001...

Debian dsa-6513 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6513 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6513-1 [email protected] https://www.debian.org/securit...

MGASA-2026-0447 Updated fuse3 package fixes security vulnerabilities

This update brings security fixes provided by upstream...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-nifi, apache-camel-karavan-devmode, hadoop-fips, pinot, kafka-fips, spark, kafka, spark-fips, akhq, ghidra, apache-pulsar, apache-pulsar-fips, zookeeper, opensearch, zookeeper-fips, hadoop-client-modules, scala, druid, pinot-fips, wazuh-indexe...

GHSA-5Q95-HRPC-M3W3 vulnerabilities

Vulnerabilities for packages: opensearch-fips, elasticsearch, apache-nifi, apache-camel-karavan-devmode, hadoop-fips, pinot, kafka-fips, spark, kafka, spark-fips, akhq, sonarqube, ghidra, apache-pulsar, apache-pulsar-fips, zookeeper, opensearch, zookeeper-fips, hadoop-client-modules, scala, druid...

Oracle Linux 8 : postgresql:16 (ELSA-2026-69876)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69876 advisory. - Fix CVE-2026-6464 - Fix CVE-2026-18408 - Fix CVE-2026-14669 Tenable has extracted the preceding description block directly from the Oracle Linux...

PHP 8.5.x < 8.5.11 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.11 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

PHP 8.3.x < 8.3.35 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.35. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.35 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

PHP 8.2.x < 8.2.34 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.2.34. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.34 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

PHP 8.4.x < 8.4.26 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.4.26. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.26 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

Slackware Linux 15.0 / current php82 Multiple Vulnerabilities (SSA:2026-267-01)

The version of php82 installed on the remote host is prior to 8.2.34 / 8.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-267-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Security Bulletin: Multiple Vulnerabilities have been identified in WebSphere Application Server shipped with IBM WebSphere Remote Server

Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: IBM WebSphere Application Server - Liberty is affected by multiple vulnerabilities - 26.0.0.8

Summary IBM WebSphere Application Server Liberty is shipped as a supporting program of IBM OpenPages. Information about multiple vulnerabilities affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. These products have addressed the applicable CVEs. For a...