Fedora 45 : nsd (2026-3d49d46891)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d49d46891 advisory. Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve corre...

Fedora 45 : chezmoi (2026-3ed4522172)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3ed4522172 advisory. Update to 2.73.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Linux Distros Unpatched Vulnerability : CVE-2026-62303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses...

Fedora 45 : aegisub (2026-d296db490c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d296db490c advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

Fedora 45 : php-getid3 (2026-6ef35023a5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ef35023a5 advisory. Version 1.9.27: 2026-09-22 GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length GHSA-j649-xr34-mmmh remove LIBXMLNOENT embedded picture in WMA files is...

Linux Distros Unpatched Vulnerability : CVE-2026-119131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http that lets guests crash the host by sendi...

Fedora 45 : iperf3 (2026-72fe3625a6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-72fe3625a6 advisory. Update 3.22. Fixes rhbz2543656 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : qdigidoc (2026-1ad5c5826b)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1ad5c5826b advisory. - Upstream release 4.11.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Linux Distros Unpatched Vulnerability : CVE-2026-100105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by...

Fedora 45 : aom (2026-0f5471b465)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0f5471b465 advisory. Update to version 3.15.2. Release notes since 3.13.3: - https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.0 -...

Fedora 45 : thunderbird (2026-6e46e724e6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6e46e724e6 advisory. Update to latest upstream version. ---- Update to latest upstream version. Tenable has extracted the preceding description block directly from the...

Fedora 45 : libXi (2026-1b60a5536e)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1b60a5536e advisory. libXi 1.8.4, fixes CVE-2026-109090, CVE-2026-109089, CVE-2026-94282, CVE-2026-94281, CVE-2026-93545, CVE-2026-93544, CVE-2026-93543, CVE-2026-93542,...

Linux Distros Unpatched Vulnerability : CVE-2026-119338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crxsa-2026_92209)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202692209 advisory. kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check the interrupt is...

Rocky Linux 10.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlba-2026_22541)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202622541 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability t...

Fedora 45 : perl-Net-IDN-Encode (2026-2aac921262)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2aac921262 advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

Fedora 45 : at-spi2-core / gjs / gnome-calculator / gnome-control-center / etc (2026-2812a1754d)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-2812a1754d advisory. GNOME 51.1 released packages Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Linux Distros Unpatched Vulnerability : CVE-2026-119191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer...

Debian dla-4871 : cyrus-sasl2-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4871 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4871-1 [email protected] https://www.debian.org/lts/security/...

FreeBSD : MySQL 26.7 -- Multiple vulnerabilities, no fix available (24aaad94-d452-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24aaad94-d452-11f1-bae2-3497f65b111b advisory. Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for...

Linux Distros Unpatched Vulnerability : CVE-2026-118769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a...

Fedora 45 : mingw-freetype (2026-ea3ceeda71)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ea3ceeda71 advisory. Backport fix for CVE-2026-95512. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : gegl04 (2026-5ad31c49cd)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ad31c49cd advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...

Rocky Linux 9 [CIQ] Security Update: aspell / aspell-debuginfo / aspell-debugsource / aspell-devel (crlsa-2026_92458)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692458 advisory. aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 Tenable has extracted the preceding description block directly from the CIQ...

Linux Distros Unpatched Vulnerability : CVE-2026-116128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies. The decoder adds each read...

Fedora 45 : jupyterlab / python-jupyter-builder / python-nbdime / etc (2026-3be88652b5)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-3be88652b5 advisory. New releases of packages in Jupyter stack fixing various CVEs. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : zvbi (2026-eb3f957b9e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eb3f957b9e advisory. Update to 0.2.46 Fixes CVE-2026-110654 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 45 : libdigidocpp (2026-880f2eea6e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-880f2eea6e advisory. - Upstream release 4.5.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Linux Distros Unpatched Vulnerability : CVE-2026-119285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in...

RockyLinux 9 : .NET 8.0 (RLSA-2026:92492)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92492 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

AlmaLinux 10 : .NET 8.0 (ALSA-2026:92428)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:92428 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92428)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692428 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92420)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692420 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_92378)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692378 advisory. ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing CVE-2026-101911 brace-expansion: brace-expansion: Denial of Service via...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793450567)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793450567 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell...

Rocky Linux 9.2 [CIQ] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal Multiple Vulnerabilities (ciqsa-2026_1736)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261736 advisory. This advisory aggregates security fixes for the gdb SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-13732, CVE-2006-4146. Tenable has extracted the...

Fedora 45 : python3.12 (2026-ac7121c8b2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac7121c8b2 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Rocky Linux 10.2 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_92419)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692419 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP...

Rocky Linux 9 [CIQ] Security Update: libXrender / libXrender-debuginfo / libXrender-debugsource / etc (crlsa-2026_91057)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691057 advisory. libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 Tenable has extracted the preceding description block directly fr...

Fedora 45 : flare-im (2026-3b19eca5ec)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b19eca5ec advisory. Latest upstream release. Changes: https://gitlab.com/schmiddi-on-mobile/flare/-/blob/0.22.7/CHANGELOG.md . ---- Update to latest upstream security release...

RockyLinux 8 : hplip (RLSA-2026:82295)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multip...

Linux Distros Unpatched Vulnerability : CVE-2026-119721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blobheadid accessors in readfile.cc that read ID fields without block...

Fedora 45 : 3proxy (2026-76b0dc56f1)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-76b0dc56f1 advisory. Update to 1.0.1 fixes rhbz2549022 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : mingw-python3 (2026-7740bc798f)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7740bc798f advisory. Update to python-3.11.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-119722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct that skips size validation when a .blend file's SDNA...

Fedora 45 : ImageMagick (2026-bda9b63b0e)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bda9b63b0e advisory. Automatic update for ImageMagick-7.1.2.34-1.fc45. Changelog for ImageMagick Thu Oct 15 2026 Luya Tshimbalanga - 1:7.1.2.34-1 - Update to version...

Linux Distros Unpatched Vulnerability : CVE-2026-107347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to...

Fedora 45 : kernel (2026-a7785c1567)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a7785c1567 advisory. The 7.2.13 stable kernel update contains a number of important fixes across the tree. ---- The 7.2.12 stable kernel update contains a number of important fix...

Fedora 45 : ntpsec (2026-7fb98d1c29)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7fb98d1c29 advisory. Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486. Tenable has...

Fedora 45 : fips-provider / kryoptic / rust-blake2b_simd / rust-blake3 / etc (2026-d9ba6a2644)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-d9ba6a2644 advisory. Update the lzma-rust2 crate to version 0.23.0. Update typed-path to version 0.13.0. Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346,...