ALSA-2026:93471 Important: perl-YAML:1.24 security update

he perl-YAML package provides the pure-Perl implementation of the YAML YAML Ain't Markup Language data serialization standard. It allows developers to serialize Perl data structures into formatted YAML text and deserialize YAML data back into native Perl structures, making it widely used for...

bind9.16 security update

32:9.16.23-0.22.21 - CVE-2026-94300 bind9.16: bind: Arbitrary code execution via GSS-TSIG UDP message replay 32:9.16.23-0.22.20 - CVE-2026-97313 bind9.16: bind: Denial of service via assertion failure in RPZ query processing 32:9.16.23-0.22.19 - CVE-2026-96888 bind9.16: bind: Denial of Service vi...

bind security, bug fix, and enhancement update

32:9.11.36-18 - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay 32:9.11.36-17 - CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages processing of crafted DNS messages 32:9.11.36-16.17 - Backport additional checks for th...

Node.js 24.22.0 Brotli Decoder Remote Code Execution

Node.js version 24.22.0 contains an out-of-bounds write in the Brotli decoder. A proof of concept demonstrates remote code execution through a crafted Brotli-compressed HTTP request. https://packetstorm.news/download/238892...

PT-2026-135817

ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length...

CVE-2026-91908: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution...

PT-2026-135483

Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 1.16 Description A path traversal issue exists in the services/users/index.php endpoint. This occurs because the module name parameter is not properly sanitized before being concatenated into an include path...

PT-2026-135449

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

PT-2026-135809

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service...

CVE-2026-91894: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service...

PT-2026-135451

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte...

CVE-2026-8923: Zohocorp: Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated…

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option...

PT-2026-135810

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

PT-2026-135405

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option...

CVE-2026-120436: Netpbm: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that…

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbgdecmergeplanes overflows th...

LibreOffice Code Execution

The vulnerability in the LibreOffice office suite package is related to the inclusion of functions from an untrusted controlled area. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

NGINX Plus/Open Source Code Execution

The vulnerability in the ngxhttpcoremodule of NGINX Plus and NGINX Open Source web servers is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

Black Python Code Formatter Code Execution

The vulnerability in the Black Python code formatting tool is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code via a malicious peripheral device...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Views component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...