TencentOS Server 3: ansible-core (TSSA-2026:1118)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1118 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4328)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791323880)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791323880 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4314)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

AlmaLinux 8 : flatpak (ALSA-2026:80687)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80687 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

EulerOS 2.0 SP13 : containerd (EulerOS-SA-2026-4035)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

TencentOS Server 4: gdb (TSSA-2026:1081)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1081 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Debian dsa-6556 : nagios4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6556 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6556-1 [email protected] https://www.debian.org/securit...

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-3191)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3191 advisory. A critical arbitrary code execution vulnerability CWE-94 found in the DBD::DBM database driver, which is a core component shipped within the Perl DBI Database Interface module. The flaw exists because...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4237)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

EulerOS 2.0 SP11 : containerd (EulerOS-SA-2026-4308)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...

EulerOS 2.0 SP13 : perl-IO-Compress (EulerOS-SA-2026-4087)

According to the versions of the perl-IO-Compress packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4214)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

EulerOS 2.0 SP13 : containerd (EulerOS-SA-2026-4126)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

EulerOS 2.0 SP13 : gzip (EulerOS-SA-2026-4052)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791479721)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791479721 advisory. - GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...

EulerOS 2.0 SP13 : perl-Archive-Tar (EulerOS-SA-2026-4173)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2026-4342)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap...

AlmaLinux 10 : flatpak (ALSA-2026:80498)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80498 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

PT-2026-110533

Name of the Vulnerable Software and Affected Versions Tuleap Enterprise Edition versions 17.0 through 17.5 Description A Stored Cross-site Scripting XSS issue exists, which could allow an attacker to execute arbitrary script code within the browser session of a user. Stored XSS occurs when a...