AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...

PT-2026-135866

ANT-2026-6W9NPC2Q mmap dimension product integer overflow Fix Use caml umul overflow instead of when multiplying bigarray dimensions, which detects integer overflows and raise Failure. Negative positions are also rejected by raising Invalid argument. Am I affected? If either the dimensions or the...

PT-2026-135161

Security vulnerability affects the argo-cd package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...

AlmaLinux 9 : expat (ALSA-2026:88247)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:88247 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

Linux Distros Unpatched Vulnerability : CVE-2026-10758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer...

ROS-20261023-73-0217

The vulnerability in libxml2 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE SLES16 Security Update : aliyun-cli (SUSE-SU-2026:24261-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:24261-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDic...

Linux Distros Unpatched Vulnerability : CVE-2026-93518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayla...

FreeRDP 3.31.1 Integer Truncation Heap Buffer Overflow

FreeRDP versions 3.0.0 through 3.31.1 contain an integer truncation vulnerability in licensecheckstreamlength that lets a malicious RDP server trigger a heap buffer overflow on 32-bit clients...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.20. It arises because bpfflowdissect fails to enforce hlen to U16MAX prior to clamping it when processing offsets returned by BPF programs. If hlen exceeds 65535, it is truncated to U16MAX, causing nhoff and thoff to be forced to zero. Thi...

GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...

Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...

Linux sch_cake Heap Buffer Overflow DoS

The vulnerability of the cakecalcoverhead function in the net/sched/schcake.c component of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261023-73-0074

The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-121870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gntalloc ioctl alloc function where the grant-id array is allocated before verifying if the requested count is within the global grant limit. This allows...

Oracle Linux 9 : expat (ELSA-2026-88247)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88247 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

SUSE CVE-2026-98819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8MAX, and records exceeding...

Exploit for CVE-2026-109255

CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 contains an intege...

Exploit for CVE-2026-110264

GitLab CVE-2026-110264 Security Exposure Auditor !Go Versio...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2. Libxml2 is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-74860 DESCRIPTION: A flaw was...