391823 matches found
Fedora 44 : kryoptic / rust-blake2b_simd / rust-blake3 / rust-constant_time_eq / etc (2026-f782e1aa07)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f782e1aa07 advisory. Update the lzma-rust2 crate to version 0.23.0. Update typed-path to version 0.13.0. Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346,...
Rocky Linux 9 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_4330)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234330 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...
EulerOS Virtualization 2.15.0 : sssd (EulerOS-SA-2026-4733)
According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder...
EulerOS Virtualization 2.15.0 : gnutls (EulerOS-SA-2026-4695)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...
EulerOS Virtualization 2.15.1 : python3 (EulerOS-SA-2026-4790)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combinin...
Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_95370)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695370 advisory. kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket CVE-2026-64541 kernel: sctp: avoid authenable sysctl UAF during netns teardown...
EulerOS Virtualization 2.15.0 : vim (EulerOS-SA-2026-4859)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the...
Linux Distros Unpatched Vulnerability : CVE-2026-112907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, soft lock classes on Windows read an existing marker with readlockfile and...
EulerOS Virtualization 2.15.1 : openjpeg2 (EulerOS-SA-2026-4656)
According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...
EulerOS Virtualization 2.15.1 : vim (EulerOS-SA-2026-4800)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the...
EulerOS Virtualization 2.15.0 : mesa (EulerOS-SA-2026-4711)
According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...
Linux Distros Unpatched Vulnerability : CVE-2026-103674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the...
EulerOS Virtualization 2.15.0 : openssh (EulerOS-SA-2026-4831)
According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authenticatio...
EulerOS Virtualization 2.15.0 : emacs (EulerOS-SA-2026-4691)
According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG...
EulerOS Virtualization 2.15.0 : openssh (EulerOS-SA-2026-4715)
According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 OpenSSH before...
EulerOS Virtualization 2.15.1 : nghttp2 (EulerOS-SA-2026-4655)
According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...
EulerOS Virtualization 2.15.1 : vim (EulerOS-SA-2026-4581)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag...
Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc (crlsa-2026_95281)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202695281 advisory. xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Tenable has extracted the preceding...
EulerOS Virtualization 2.15.1 : perl-Archive-Tar (EulerOS-SA-2026-4778)
According to the versions of the perl-Archive-Tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction...
EulerOS Virtualization 2.15.0 : edk2 (EulerOS-SA-2026-4626)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...
EulerOS Virtualization 2.15.0 : python-filelock (EulerOS-SA-2026-4612)
According to the versions of the python-filelock package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability...
EulerOS Virtualization 2.15.1 : binutils (EulerOS-SA-2026-4629)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and...
EulerOS Virtualization 2.15.1 : python-idna (EulerOS-SA-2026-4784)
According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...
EulerOS Virtualization 2.15.0 : expat (EulerOS-SA-2026-4591)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515 In libexpat...
EulerOS Virtualization 2.15.0 : libarchive (EulerOS-SA-2026-4600)
According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when...
EulerOS Virtualization 2.15.1 : wget (EulerOS-SA-2026-4801)
According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function...
Fedora 43 : kryoptic / rust-blake2b_simd / rust-blake3 / rust-constant_time_eq / etc (2026-a011e63a06)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a011e63a06 advisory. Update the lzma-rust2 crate to version 0.23.0. Update typed-path to version 0.13.0. Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346,...
Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.6:CLSA-2026:1794052653)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794052653 advisory. - ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled...
EulerOS Virtualization 2.15.1 : glibc (EulerOS-SA-2026-4636)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...
EulerOS Virtualization 2.15.0 : alsa-lib (EulerOS-SA-2026-4804)
According to the versions of the alsa-lib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c...
EulerOS Virtualization 2.15.0 : shim (EulerOS-SA-2026-4619)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function. Impac...
EulerOS Virtualization 2.15.0 : python-wheel (EulerOS-SA-2026-4618)
According to the versions of the python-wheel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, th...
Linux Distros Unpatched Vulnerability : CVE-2026-123784
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style...
EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4583)
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the...
EulerOS Virtualization 2.15.0 : kernel (EulerOS-SA-2026-4698)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445...
EulerOS Virtualization 2.15.0 : shim (EulerOS-SA-2026-4854)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...
EulerOS Virtualization 2.15.1 : autogen (EulerOS-SA-2026-4544)
According to the versions of the autogen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function strstrsse2. The...
EulerOS Virtualization 2.15.0 : perl (EulerOS-SA-2026-4836)
According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit...
EulerOS Virtualization 2.15.1 : cifs-utils (EulerOS-SA-2026-4749)
According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...
EulerOS Virtualization 2.15.1 : expat (EulerOS-SA-2026-4549)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515 In libexpat...
EulerOS Virtualization 2.15.0 : xz (EulerOS-SA-2026-4739)
According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...
EulerOS Virtualization 2.15.1 : libcap (EulerOS-SA-2026-4645)
According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the...
EulerOS Virtualization 2.15.0 : libXpm (EulerOS-SA-2026-4701)
According to the versions of the libXpm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-125...
EulerOS Virtualization 2.15.1 : avahi (EulerOS-SA-2026-4545)
According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier,...
EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4683)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short...
EulerOS Virtualization 2.15.0 : zlib (EulerOS-SA-2026-4624)
According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop th...
Fedora 44 : sofia-sip (2026-b176109503)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b176109503 advisory. Upstream release 1.13.19. ---- Patch for out-of-bounds read in msgmultipartparse. Tenable has extracted the preceding description block directly fro...
EulerOS Virtualization 2.15.0 : avahi (EulerOS-SA-2026-4587)
According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier,...
EulerOS Virtualization 2.15.1 : patch (EulerOS-SA-2026-4776)
According to the versions of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling ...
EulerOS Virtualization 2.15.1 : xz (EulerOS-SA-2026-4681)
According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...