Rocky Linux 8 [CIQ] Security Update: tesseract / tesseract-debuginfo / tesseract-debugsource / etc Multiple Vulnerabilities (crlsa-2026_95725)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695725 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

Fedora 43 : python-boto3 / python-botocore / python-s3transfer (2026-1f40f6b868)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1f40f6b868 advisory. Latest updates. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : python-joserfc (2026-7888ffd011)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7888ffd011 advisory. Update to 1.7.7 rhbz2567025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 43 : composer (2026-f2a72b9a61)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f2a72b9a61 advisory. Version 2.11.1 - 2026-10-30 Added a warning when the cache dir is on a Windows drive while running in WSL, as this makes filesystem operations very slow 1317...

Fedora 44 : composer (2026-0fac5fe7fe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0fac5fe7fe advisory. Version 2.11.1 - 2026-10-30 Added a warning when the cache dir is on a Windows drive while running in WSL, as this makes filesystem operations very slow 1317...

Fedora 45 : python3.12 (2026-5f99243da4)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5f99243da4 advisory. New version of the Python interpeter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : pcre2 (2026-3dc7e56d1e)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3dc7e56d1e advisory. Update pcre2 to 10.49, fixing security issues CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161,...

Fedora 44 : dnf5 (2026-97ca946ad2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-97ca946ad2 advisory. Update to upstream version 5.4.7. - reposync: add --latest-limit=N option - dnf5-plugin config-manager: add vendor policy management commands - offline: Wait...

Fedora 45 : python-joserfc (2026-a4d05e8333)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a4d05e8333 advisory. Update to 1.8.0 rhbz2567025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 45 : mtools (2026-e9b29b6da4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e9b29b6da4 advisory. Update to 4.0.50 2564411 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 43 : elixir (2026-f5e380a553)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5e380a553 advisory. Elixir ver. 1.19.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : java-21-openjdk / java-21-openjdk-portable (2026-765549feb9)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-765549feb9 advisory. October java CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : pie (2026-0a5b752f19)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0a5b752f19 advisory. Version 1.4.12 - Fix GHSA-4538-pqqf-mv67 ---- Version 1.4.11 - dependencies update Tenable has extracted the preceding description block directly from the...

Fedora 44 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-b7ad391dd5)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7ad391dd5 advisory. Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to...

Fedora 43 : python3.12 (2026-4e3279af04)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e3279af04 advisory. New version of the Python interpeter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : luksmeta (2026-a00abaf169)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a00abaf169 advisory. New upstream release v11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : pie (2026-35cc73bd06)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-35cc73bd06 advisory. Version 1.5.5 - Fix GHSA-4538-pqqf-mv67 ---- Version 1.5.4 - dependencies update ---- Version 1.5.3 - fix pie staticphp exe issues - update bundled...

Fedora 44 : elixir (2026-7be0823ab4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7be0823ab4 advisory. Elixir ver. 1.19.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : rsync (2026-30581e33eb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30581e33eb advisory. The 3.5.2 version included a regression that can cause Operation not supported errors when preserving permissions. ---- New version 3.5.2, includes the fix f...

Fedora 45 : rccl (2026-5b6559d7c1)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5b6559d7c1 advisory. CVE-2026-43598 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 44 : rccl (2026-e85939a5f8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e85939a5f8 advisory. CVE-2026-43598 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 45 : elixir (2026-173435e952)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-173435e952 advisory. Elixir ver. 1.20.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : pie (2026-0d5a544c64)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0d5a544c64 advisory. Version 1.5.5 - Fix GHSA-4538-pqqf-mv67 ---- Version 1.5.4 - dependencies update ---- Version 1.5.3 - fix pie staticphp exe issues - update bundled...

Fedora 44 : pcre2 (2026-450395b11f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-450395b11f advisory. Update pcre2 to 10.49, fixing security issues CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161,...

Rocky Linux 8 [CIQ] Security Update: protobuf-c / protobuf-c-compiler / protobuf-c-compiler-debuginfo / etc (crlsa-2023_6944)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236944 advisory. protobuf-c: unsigned integer overflow in parserequiredmember CVE-2022-48468 Tenable has extracted the preceding description block directly from the CIQ security...

Linux Distros Unpatched Vulnerability : CVE-2026-122328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files...

EulerOS Virtualization 2.15.1 : libtiff (EulerOS-SA-2026-4765)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in...

EulerOS Virtualization 2.15.0 : openssh (EulerOS-SA-2026-4715)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 OpenSSH before...

EulerOS Virtualization 2.15.1 : libssh (EulerOS-SA-2026-4562)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability exists in libssh when processing paths received from SCP servers. Attackers can bypass security...

EulerOS Virtualization 2.15.0 : cifs-utils (EulerOS-SA-2026-4808)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4787)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

EulerOS Virtualization 2.15.0 : krb5 (EulerOS-SA-2026-4699)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...

EulerOS Virtualization 2.15.0 : nghttp2 (EulerOS-SA-2026-4713)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...

EulerOS Virtualization 2.15.1 : httpd (EulerOS-SA-2026-4760)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.Users are...

EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4589)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...

EulerOS Virtualization 2.15.1 : libtasn1 (EulerOS-SA-2026-4563)

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a...

EulerOS Virtualization 2.15.0 : libarchive (EulerOS-SA-2026-4821)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS Virtualization 2.15.0 : sqlite (EulerOS-SA-2026-4732)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...

EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4791)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the...

EulerOS Virtualization 2.15.1 : openssl (EulerOS-SA-2026-4567)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is...

EulerOS Virtualization 2.15.1 : vim (EulerOS-SA-2026-4680)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob...

EulerOS Virtualization 2.15.1 : dracut (EulerOS-SA-2026-4753)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS Virtualization 2.15.0 : grub2 (EulerOS-SA-2026-4598)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closin...

EulerOS Virtualization 2.15.0 : bind (EulerOS-SA-2026-4806)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which...

EulerOS Virtualization 2.15.1 : dhcp (EulerOS-SA-2026-4548)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into...

EulerOS Virtualization 2.15.1 : libssh2 (EulerOS-SA-2026-4649)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...

EulerOS Virtualization 2.15.0 : perl-Socket (EulerOS-SA-2026-4841)

According to the versions of the perl-Socket package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its...

EulerOS Virtualization 2.15.0 : emacs (EulerOS-SA-2026-4691)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG...

EulerOS Virtualization 2.15.1 : pam (EulerOS-SA-2026-4775)

According to the versions of the pam packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path...

EulerOS Virtualization 2.15.1 : perl-Socket (EulerOS-SA-2026-4782)

According to the versions of the perl-Socket package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its...