CentOS Linux 8.5 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.5:CLSA-2026:1793631318)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793631318 advisory. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150126 advisory. c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet...

Rocky Linux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1793617036)

"The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793617036 advisory. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes t...

Photon OS 5.0: Openssl PHSA-2026-5.0-92-0982

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0982. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an...

MiracleLinux 9 : kernel-5.14.0-687.52.1.el9_8 (AXSA:2026-2228:113)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2228:113 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce...

Photon OS 4.0: Curl PHSA-2026-4.0-1092

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1092. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : libsoup (RHSA-2026:93716)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93716 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from...

Fedora 44 : python-streamlink (2026-6ffee677d1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ffee677d1 advisory. streamlink 8.6.2 2026-10-07 - SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags CVE-2026-TO-BE- ASSIGNED / GHSA-j7pf-m7gx- jr3...

Linux Distros Unpatched Vulnerability : CVE-2026-120059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0493

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0493. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/histograms: Verify eventcall identity when updating synthevent refcount In eventhisttriggerparse and histunregall, the histogram registration and...

RHEL 8 : freerdp (RHSA-2026:93537)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93537 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Fedora 45 : kernel (2026-525328fa7e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-525328fa7e advisory. The 7.2.14 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Python3 PHSA-2024-5.0-90-0231

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0231. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2026-150068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150068 advisory. libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += l...

Fedora 43 : rust-ctutils (2026-ba0a45059f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ba0a45059f advisory. Update to version 0.4.5. This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures. Tenable...

RHEL 9 : freerdp (RHSA-2026:93592)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93592 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150095 advisory. A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be...

Oracle Linux 8 : python-jwt (ELSA-2026-93440)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-93440 advisory. 1.6.1-2.1 - Fix CVE-2026-32597 Resolves: RHEL-271640 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

AlmaLinux 8 : wireshark (ALSA-2026:93627)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:93627 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-99225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while...

Fedora 44 : ruby (2026-3bacbb1eb5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3bacbb1eb5 advisory. New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation. Tenable has extracted the preceding...

Oracle Linux 7 : python-pyasn1 (ELSA-2026-59240)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59240 advisory. - Fix CVE-2026-59886 Real float conversion Orabug: 39925524 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150087 advisory. A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack...

AlmaLinux 9.2 [TuxCare] Security Update: pki-jackson-databind Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793620241)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793620241 advisory. - jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic...

Photon OS 5.0: Bindutils PHSA-2026-5.0-92-1014

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0999

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0999. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : python-pillow (ELSA-2026-93077)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93077 advisory. - CVE-2026-112900 python-pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE Resolves: RHEL-295960 - CVE-2026-112398...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: ca-certificates (UTSA-2026-150152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150152 advisory. eMudhraemSign CA Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issu...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150116 advisory. The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS. T...

RHEL 7 : Red Hat OpenStack Platform 13.0 security advisory (Important) (RHSA-2026:94039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94039 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

Fedora 43 : python-streamlink (2026-d8cf5f20d7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d8cf5f20d7 advisory. streamlink 8.6.2 2026-10-07 - SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags CVE-2026-TO-BE- ASSIGNED / GHSA-j7pf-m7gx- jr3...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0512

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0512. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2024-5.0-90-0374

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0374. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-91-1008

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150104 advisory. An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in t...

RHEL 9 : libXtst (RHSA-2026:93451)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93451 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...

Rocky Linux 9.6 [TuxCare] Security Update: perl-URI / perl-URI-tests (ALMALINUX9.6:CLSA-2026:1793618466)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793618466 advisory. - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. namepr...

RHEL 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (RHSA-2026:93444)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93444 advisory. The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator...

Photon OS 5.0: Httpd PHSA-2026-5.0-92-1024

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : rust-sequoia-git (2026-c859fd2366)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c859fd2366 advisory. Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities...

Fedora 44 : janus (2026-47eb160009)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-47eb160009 advisory. Update to v1.4.3 rhbz2549665: Security fixes: - SEC Fix potential buffer overflow in Record&Play plugin PR 3688 - SEC Fix master/helper session switch...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0779

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0779. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1007

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1007. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2025-0029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0992

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0992. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Imagemagick PHSA-2026-4.0-1091

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1091. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 45 : retsnoop (2026-15a388bbc3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-15a388bbc3 advisory. Rebuild retsnoop with newer versions of the ruzstd fedora, epel10, epel9 and memmap2 fedora, epel10, epel10.3, epel10.2, epel9 crates to address multiple...

Oracle Linux 10 : util-linux (ELSA-2026-93461)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93461 advisory. - libblkid: validate EBR data CVE-2026-53615 - libblkid: fix use-after-free in nested partition probing CVE-2026-13595 - nsenter: close cgroup.procs ...