Rocky Linux 8 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2021_3058)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213058 advisory. glib: integer overflow in gbytearraynewtake function when called with a buffer of 4GB or more on a 64-bit platform CVE-2021-27218 Tenable has extracted the precedin...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782386492)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782386492 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...

CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS7:CLSA-2023:1696352100)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1696352100 advisory. - An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a...

Rocky Linux 8 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2021_2170)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212170 advisory. glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits CVE-2021-27219 Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787848037)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787848037 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

CentOS Linux 7 [TuxCare] Security Update: openssl11 / openssl11-devel / openssl11-libs / openssl11-static Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786972455)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786972455 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785335008)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785335008 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...

SUSE CVE-2026-98157

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

AZL-104808 CVE-2026-98157 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

EUVD-2026-86988

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

CVE-2026-98157

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

PT-2026-98300

Name of the Vulnerable Software and Affected Versions Espruino version 2v29 commit bffc6d0 Description A stack-based buffer overflow exists in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can provide JavaScript input that triggers an exception, leading to the...

CVE-2026-88388

Espruino 2v29 (commit bffc6d0 ) is vulnerable to a stack-based buffer overflow within the JavaScript error stack-trace handling path on 64-bit builds . A remote attacker can provide JavaScript input that triggers an exception, leading to the execution of jslPrintTokenLineMarker(). This function i...

CVE-2026-88388: Stack-based Buffer Overflow

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-81886

A flaw was found in radare2. The Windows 64-bit crash-dump dmp64 parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper...