ROS-20261001-73-0061

The vulnerability in aardvark-dns is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261001-73-0011

The vulnerability in gstreamer1-plugins-base is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_2551)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242551 advisory. bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868 bind: KeyTrap - Extreme CPU consumption in DNSSEC validator...

ROS-20261001-73-0031

The vulnerability in Xen is related to the lack of checking for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0016

The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0017

The vulnerability in perl-YAML-Syck is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261001-73-0040

The vulnerability in expat is related to the return of incorrect status codes. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0009

The vulnerability of the storeAtts function in the Expat library is related to its algorithmic complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261001-73-0029

The vulnerability in the p11-kit is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261001-73-0008

The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...

ROS-20261001-73-0010

The vulnerability in expat is related to reading data from buffers outside of the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-105211

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are...

ROS-20261001-73-0056

The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

ROS-20261001-73-0038

The vulnerability in Xen is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0033

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0032

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0036

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-105122

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2025:1752749664)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752749664 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer...

AlmaLinux 9.6 [TuxCare] Security Update: hostapd / hostapd-logwatch (ALMALINUX9.6:CLSA-2026:1790066310)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790066310 advisory. - hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker ...