openSUSE 16 Security Update : gosec (openSUSE-SU-2026:22197-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22197-1 advisory. Changes in gosec: - Update to version 2.30.0 bsc1287590, CVE-2026-97032: fixg602: recognize equality comparison in minimumLenForBranch 1796 fixG112: hon...

MiracleLinux 9 : ignition-2.26.0-1.el9_8.2 (AXSA:2026-2215:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2215:02 advisory. crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Tenable has extracted the preceding...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:4942-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4942-1 advisory. - CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround bsc1283317. - CVE-2026-79609: x86: XPTI may break o...

openSUSE 16: kubevirt1.9-container-disk / kubevirt1.9-libguestfs-tools / etc (openSUSE-SU-2026:22180-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22180-1 advisory. - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host bsc1272840. - CVE-2026-78659:...

Fedora 43 : mupdf (2026-2fd016c93c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2fd016c93c advisory. fix CVE-2026-112036 rhbz2558213 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:22178-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22178-1 advisory. - CVE-2026-19585: github.com/hashicorp/go-getter: path traversal during S3 and GCS directory downloads may allow files to be written outside the...

RHEL 9 : java-17-openjdk security update for RHEL 9 (Important) (RHSA-2026:90500)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90500 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...

MiracleLinux 8 : perl:5.32 (AXSA:2026-2217:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2217:01 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

Rocky Linux 9.6 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc (ciqsa-2026_1740)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261740 advisory. This advisory aggregates security fixes for the dotnet8.0 SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-111497. Tenable has extracted the preceding descriptio...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92492)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692492 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

RHEL 9 : kernel (RHSA-2026:93412)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93412 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: stream: fully roll back...

RHEL 8 : kernel-rt (RHSA-2026:93415)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93415 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1745)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261745 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.6 Compliant. It addresses 18 CVEs: CVE-2026-64439, CVE-2026-72130,...

RHEL 8 : kernel (RHSA-2026:93414)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93414 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free inetopt and ireqopt after a...

CentOS Linux 7 [TuxCare] Security Update: compat-libical1 / libical / libical-devel / libical-glib / etc (CENTOS7:CLSA-2026:1793170236)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793170236 advisory. - libical through 4.0.6 contains a heap-based out-of-bounds read in icalvaluedecodeicalstring in src/libical/icalvalue.c when decoding input endi...

Fedora 45 : rust-cargo-deny (2026-27f53392b6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-27f53392b6 advisory. Rebuilt with updated webpki dependencies - Fixes RUSTSEC-2026-0381, RUSTSEC-2026-0383, and RUSTSEC-2026-0382. Tenable has extracted the preceding description...

Fedora 44 : nautilus (2026-0e44cdb49e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0e44cdb49e advisory. Fix CVE-2026-111802 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

FreeBSD : LibreSSL -- Multiple OCSP client vulnerabilities (aafad06c-d519-11f1-8135-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the aafad06c-d519-11f1-8135-8447094a420f advisory. VulnCheck reports: CVE-2026-118371: LibreSSL through 4.4.0 contains a CRLF injection...

FreeBSD : libreswan -- Multiple vulnerabilities. (cc1f80fa-d50e-11f1-8135-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cc1f80fa-d50e-11f1-8135-8447094a420f advisory. The libreswan project reports: Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-119561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse that never verifies WebAuthn asserti...

CentOS Linux 6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793167254)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793167254 advisory. - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create T...

Debian dla-4875 : imagemagick - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4875 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4875-1 [email protected]...

Fedora 44 : gcc (2026-d732fb97a0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d732fb97a0 advisory. Upstream bugs http://gcc.gnu.org/PRNNNNN fixed: 88632, 98573, 99293, 104630, 105594, 107549, 110421, 114065, 114400, 115955, 116547, 117487, 118665,...

openSUSE 16: tailscale / tailscale-bash-completion / tailscale-fish-completion / etc (openSUSE-SU-2026:22203-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22203-1 advisory. Changes in tailscale: Update to version 1.104.1: - Go is updated to version 1.27 - WireGuard packet buffering uses less memory while waiting for peer...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc (crlsa-2026_92430)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692430 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 9.0 to S...

Linux Distros Unpatched Vulnerability : CVE-2026-119600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged I...

Fedora 44 : mutt (2026-d849fe6fa1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d849fe6fa1 advisory. -updated to 2.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 46 : nodejs-pnpm12 (2026-7adfb2bcdd)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7adfb2bcdd advisory. Automatic update for nodejs-pnpm12-12.17.0-1.fc46. Changelog Sat Oct 31 2026 Andreas Schneider - 12.17.0-1 - Update to version 12.17.0 - Fixes...

Linux Distros Unpatched Vulnerability : CVE-2026-119340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC2DARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32t values...

Fedora 45 : rust-backtrace / rust-object / rust-object0.37 / rust-object0.38 / etc (2026-e10e41c5b3)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-e10e41c5b3 advisory. - Update the object crate to version 0.40.0. - Add a compat package for version 0.39 of the object crate. - Update the ruzstd crate to version 0.9.1. This...

AlmaLinux 8 : .NET 11.0 (ALSA-2026:92511)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:92511 advisory. .NET: .NET Elevation of Privilege Vulnerability CVE-2026-62909 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

Linux Distros Unpatched Vulnerability : CVE-2026-9536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind...

FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (24aa87c0-d452-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24aa87c0-d452-11f1-bae2-3497f65b111b advisory. Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for...

Rocky Linux 10.2 [CIQ] Security Update: dogtag-pki-debugsource / idm-pki-acme / idm-pki-base / idm-pki-ca / etc Multiple Vulnerabilities (crlsa-2026_92408)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692408 advisory. resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode Decompression-Bomb DoS CVE-2026-89059 resteasy-core: RESTEasy: CorsFilter Reflects...

Linux Distros Unpatched Vulnerability : CVE-2026-118768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocspcheck command requested an OCSP response from a certificate's Authority Informatio...

Fedora 45 : pie (2026-a0f0a23192)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a0f0a23192 advisory. Version 1.5.2 - pass PCRE compile flags down if using external PCRE2 thanks to @asgrim - only use OndrejPhpenmod if we're actually using the Ondrej PHP insta...

Fedora 45 : evolution / evolution-data-server / evolution-ews (2026-cb44cadc9a)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-cb44cadc9a advisory. Update to 3.62.1 evolution-data-server Bug Fixes: I661 - OAuth2: Resolve collection as credential source on the token path Tobias Mueller I666 - OAuth2: Read...

Linux Distros Unpatched Vulnerability : CVE-2026-84381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and...

Fedora 45 : openjpeg (2026-e0d454da76)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0d454da76 advisory. Apply proposed fix for 2552420. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : brasero / epiphany / gnote / gtksourceview5 / libgsf (2026-75ff55f383)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-75ff55f383 advisory. Update to newer versions and rebuild against new libxml2 libgsf 1.14.60 Fix ABW for ole2. 54 brasero 3.12.4 Bugs fixed and enhancements: Remove libegg...

Fedora 45 : mutt (2026-b296359172)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b296359172 advisory. -updated to 2.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : markdownlint-cli2 (2026-e67ee28d98)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e67ee28d98 advisory. Update ---- CVE fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Linux Distros Unpatched Vulnerability : CVE-2026-119719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow...

Fedora 45 : pgbouncer (2026-7a36c3f409)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a36c3f409 advisory. Update to 1.26.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : gnome-shell-extension-gsconnect (2026-508badc038)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-508badc038 advisory. Voici les notes de la release, telles que publies par daniellandau le 2026-09-23 : --- Release GSConnect v73 What's Changed Security: fix authenticated path...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_92208)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692208 advisory. kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check the interrupt is...

Fedora 45 : nebula (2026-1aa327b369)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1aa327b369 advisory. Windows tracks NLMTU per address family and Nebula only ever set it for AFINET, so the IPv6 MTU on every Windows adapter sat at the adapter default ...

Fedora 45 : linux-firmware (2026-b7618e98ac)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b7618e98ac advisory. Update to 20261019: rockchip: add PCIe3 PHY firmware for snps-pcie3 Update ADSP firmware for Qualcomm qcs615 platform. Revert amdgpu: update GC 11.0.0 firmwa...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc (crlsa-2026_92431)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692431 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 10.0 to SDK...

Rocky Linux 8 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_92474)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692474 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS proxy...