TencentOS Server 4: rpcbind (TSSA-2026:1070)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1070 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : perl-Storable (EulerOS-SA-2026-4180)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

EulerOS 2.0 SP13 : python-sphinx (EulerOS-SA-2026-4190)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

EulerOS 2.0 SP13 : rsyslog (EulerOS-SA-2026-4195)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2026-4063)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2026-3161)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3161 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

CVE-2026-109268: Use After Free

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...

Amazon Linux 2023 : python3.13-pip, python3.13-pip-wheel (ALAS2023-2026-3172)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3172 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser...

PT-2026-110677

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description A memory leak exists in the PNG encoder that occurs when libpng initialization fails, preventing the release of allocated memory. An attacker can cause ...

Amazon Linux 2023 : mariadb114, mariadb114-backup, mariadb114-client-utils (ALAS2023-2026-3199)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3199 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL...

Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2026-3175)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3175 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser...

EulerOS 2.0 SP11 : rsyslog (EulerOS-SA-2026-4287)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Rocky Linux 10.2 [CIQ] Security Update: dogtag-pki-debugsource / idm-pki-acme / idm-pki-base / idm-pki-ca / etc (crlsa-2026_77648)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677648 advisory. com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing...

EulerOS 2.0 SP13 : rsyslog (EulerOS-SA-2026-4104)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

EulerOS 2.0 SP11 : rsyslog (EulerOS-SA-2026-4377)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

ALSA-2026:80817 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

Amazon Linux 2 : perl-Storable (ALAS-2026-3989)

The version of perl-Storable installed on the remote host is prior to 2.45-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3989 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record...

EulerOS 2.0 SP11 : python3 (EulerOS-SA-2026-4373)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML...

EulerOS 2.0 SP11 : perl-XML-LibXML (EulerOS-SA-2026-4363)

According to the versions of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

TencentOS Server 3: grafana (TSSA-2026:1139)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1139 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...