EulerOS 2.0 SP11 : rpm (EulerOS-SA-2026-4375)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the RPM Package Manager RPM. A local user could be affected by a heap buffer overflow vulnerability when processing a specially...

EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4058)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS 2.0 SP13 : openssl (EulerOS-SA-2026-4169)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791479721)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791479721 advisory. - GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers...

ALSA-2026:80514 Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping...

Important: parted

Issue Overview: heap buffer overflow in initfats / fattableread NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html CVE-2026-89085 heap buffer overflow in duplicatelegacyrootdir NOTE:...

CVE-2026-109250: Improper Validation of Array Index

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

CVE-2026-109256: Heap-based Buffer Overflow

FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR pngwritedata callback that writes past the buffer after a realloc failure. A malicious RDP clipboard peer can supply a large CFDIB image that triggers out-of-bounds memcpy during PNG conversion, causing a client crash...

CVE-2026-109255: Heap-based Buffer Overflow

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

Important: libsoup

Issue Overview: A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API ca...

Important: libreoffice

Issue Overview: LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, s...

rsyslog security update

8.2102.0-15.0.1.el810.3 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2102.0-15.3 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246632 8.2102.0-15.2 - Backport: imptcp: guard regex-framing match against...

PT-2026-110672

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An integer truncation issue exists in the license check stream length function. A malicious RDP server can exploit this by sending a crafted SERVER LICENSE REQUEST containing a large scopeCount...

PT-2026-110673

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.10.0 through 3.32.2 Description A heap buffer overflow occurs in the WinPR png write data callback when a realloc failure happens. A malicious RDP clipboard peer can trigger an out-of-bounds memcpy during PNG conversion by...

PT-2026-110667

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description A heap buffer overflow occurs in the collect keys function during PKCS11 key enumeration. Local attackers can exploit this by using smartcard tokens that present more than 64 public key objects...

Amazon Linux 2 : parted (ALAS-2026-3982)

The version of parted installed on the remote host is prior to 3.1-29. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3982 advisory. heap buffer overflow in initfats / fattableread NOTE:...

RHEL 9 : compat-openssl11 (RHSA-2026:80514)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:80514 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

EulerOS 2.0 SP13 : wget (EulerOS-SA-2026-4205)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4065)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...

Amazon Linux 2 : libsoup (ALAS-2026-3998)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3998 advisory. A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequatel...