openSUSE 16 Security Update : cjose (openSUSE-SU-2026:21944-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21944-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow bsc1279844. -...

Oracle Linux 8 : libxml2 (ELSA-2026-71641)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71641 advisory. - Fix CVE-2026-86144 RHEL-256306 - Fix CVE-2026-86140 RHEL-256021 - Fix CVE-2026-74860 RHEL-255956 - Fix CVE-2026-86143 RHEL-256895 Tenable has...

Fedora 44 : mingw-python3 (2026-cee8eac8cc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cee8eac8cc advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

openSUSE 16: libtesseract5 / libtesseract5-x86-64-v3 / tesseract-ocr / etc (openSUSE-SU-2026:21957-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21957-1 advisory. Changes in tesseract-ocr: - Update to version 5.5.3 sync with Factory: CVE-2026-73067: heap out-of-bounds read in SquishedDawg on crafted model...

openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21959-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21959-1 advisory. Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276233 - CVE-2026-18301: GIMP...

RockyLinux 10 : kernel (RLSA-2026:71602)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71602 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: libceph: fix potential use-after-free in havemonandosdmap...

RockyLinux 9 : kernel (RLSA-2026:71700)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71700 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21951-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21951-1 advisory. Update to Firefox Extended Support Release 153.3.0 ESR MFSA 2026-93, bsc1280371: - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs...

Debian dla-4797 : lemonldap-ng - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4797 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/...

Fedora 44 : postgresql16-postgis / postgresql17-postgis / postgresql18-postgis (2026-0fe48ab374)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-0fe48ab374 advisory. Backport fix for CVE-2026-73515. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

FreeBSD : p5-YAML-Syck -- Multiple vulnerabilities (501ff33c-b996-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 501ff33c-b996-11f1-ad2b-40b034429ecf advisory. YAML-Syck project reports: YAML-Syck 1.47 fix the following issues: Tenable has extracted the...

SUSE SLES12: gnome-shell / gnome-shell-browser-plugin / gnome-shell-devel / etc (SUSE-SU-2026:4350-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4350-1 advisory. This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote...

FreeBSD : p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5 (023a3d0c-b987-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 023a3d0c-b987-11f1-ad2b-40b034429ecf advisory. Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

Fedora 44 : libheif (2026-cfdbb8b2f0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cfdbb8b2f0 advisory. Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.5 . Tenable has extracted the...

Debian dsa-6517 : libnode-dev - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6517 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6517-1 [email protected] https://www.debian.org/securit...

Fedora 44 : mongo-c-driver (2026-4286ff2dfd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4286ff2dfd advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

Fedora 44 : sipp (2026-e377b4938d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e377b4938d advisory. Fixed a bunch of CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-100700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-text fallback regex pattern that exhibits quadratic backtracking...

openSUSE 16 Security Update : haveged (openSUSE-SU-2026:21958-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21958-1 advisory. Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket bsc1264086. Tenable has extracted the preceding...

SUSE SLES12 Security Update : python-WebOb (SUSE-SU-2026:4351-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4351-1 advisory. - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled ho...

Fedora 43 : libpcap (2026-4401b94ad0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4401b94ad0 advisory. New version 10.7.1 Fix for CVE-2026-0799, CVE-2026-6244, CVE-2026-6554, CVE-2026-18238, CVE-2026-18313, CVE-2026-31911, CVE-2026-31912 Tenable has...

openSUSE 16 Security Update : openSUSE-signkey-cert (openSUSE-SU-2026:21952-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21952-1 advisory. Adds the UEFI signing key of Leap 16.0. This needs to be imported via the MOK dialog on boot. Tenable has extracted the preceding description block...

openSUSE 16 Security Update : gitoxide (openSUSE-SU-2026:21955-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21955-1 advisory. Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host...

Linux Distros Unpatched Vulnerability : CVE-2026-100689

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27j...

openSUSE 16 Security Update : libpcap (openSUSE-SU-2026:21940-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21940-1 advisory. - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and...

openSUSE 16: sdbootutil / sdbootutil-bash-completion / etc (openSUSE-SU-2026:21933-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21933-1 advisory. Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. -...

Fedora 46 : ruff / rust-salsa / rust-salsa-macro-rules / rust-salsa-macros / ty (2026-77f6cda09a)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77f6cda09a advisory. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55vh-cw3w. Update ruff to 0.16.9 and ty to 0.0.84,...

Fedora 44 : ckermit (2026-32742a29dc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-32742a29dc advisory. Update to 11.0.509 which fixes CVE-2025-68920 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Debian dsa-6519 : python3-swift - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6519 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6519-1 [email protected] https://www.debian.org/security/ Moritz...

openSUSE 16 Security Update : python-asyncssh (openSUSE-SU-2026:21953-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21953-1 advisory. Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets bsc1280972 Tenable has extracte...

Debian dsa-6518 : golang-github-lxc-incus-dev - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6518 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz...

openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21935-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21935-1 advisory. This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in...

Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-d5e9ea2b8c)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-d5e9ea2b8c advisory. Update to gstreamer-1.28.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 44 : goose (2026-24f75e4c7a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-24f75e4c7a advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-100699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a...

Linux Distros Unpatched Vulnerability : CVE-2026-100702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustio...

Oracle Linux 9 : kernel (ELSA-2026-71232)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71232 advisory. - net: tun: bound receive headroom CKI Backport Bot RHEL-264401 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft CKI Backport Bot...

Linux Distros Unpatched Vulnerability : CVE-2026-96748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8813-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8813-1 advisory. It was discovered that Expat did not correctly handle certain integer arithmetic...

RHEL 7 : kernel (RHSA-2026:71687)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71687 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow...

openSUSE 16 Security Update : gdb (openSUSE-SU-2026:21890-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21890-1 advisory. This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

Linux Distros Unpatched Vulnerability : CVE-2026-97617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning...

Linux Distros Unpatched Vulnerability : CVE-2026-98099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb usi...

Linux Distros Unpatched Vulnerability : CVE-2026-73064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS...

Linux Distros Unpatched Vulnerability : CVE-2026-97536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq,...

Linux Distros Unpatched Vulnerability : CVE-2026-98132

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: don't downgrade half-dead scalar zero spills to STACKZERO states.c:cleanfuncstate can downgrade scalar zero spill to STACKZERO in the following case: u64...

openSUSE 16 Security Update : libsoup (openSUSE-SU-2026:21901-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21901-1 advisory. - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overfl...

MiracleLinux 9 : buildah-1.43.3-2.el9_8 (AXSA:2026-1915:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1915:08 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting...

Linux Distros Unpatched Vulnerability : CVE-2026-98053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Refactor and fix initconfig access Existing code accesses enties found in -initconfigs array through indexes that are part of -configids array...

Linux Distros Unpatched Vulnerability : CVE-2026-97553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: lock the healthmon when inserting unmount event LOLLM complains that xfshealthmonunmount does an unlocked insert of the unmount event into the health...