gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2026-67868

A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code...

CVE-2026-27654 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-40460 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-28755 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-HWQ5-42J9-JVQJ vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42946 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-H7RQ-F9GQ-MC8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-18809 vulnerabilities

Vulnerabilities for packages: firefox...

MINI-RJ2C-FQVG-M47V

Bulletin has no description...

MINI-RHQQ-JRG5-GQXC

Bulletin has no description...

MINI-M4F4-Q4V9-V5R8

Bulletin has no description...

MINI-G5JV-5XVH-GXM4

Bulletin has no description...

MINI-3RGC-QPW8-MJ43

Bulletin has no description...

RLSA-2026:55448 Important: libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client CVE-2026-44950 For more details about the security issues, including the...

libXfont2 security update

An update is available for libXfont2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server...

gstreamer1-plugins-bad-free security update

An update is available for gstreamer1-plugins-bad-free. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

CVE-2026-72003

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...