PT-2026-134697

Security vulnerability affects the etcd package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...

CentOS Linux 8.5 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792622946)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792622946 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Gitlab Gitlab: CVE-2026-110264: Integer Overflow or Wraparound

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

Debian dla-4849 : expat - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4849 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4849-1 [email protected]...

RHEL 10 : expat (RHSA-2026:88248)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88248 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...

expat security update

2.7.3-63 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc 2.7.3-62 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XMLParseBuffer 2.7.3-61 - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribu...

Oracle Linux 10 : expat (ELSA-2026-88248)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88248 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

Gitlab Gitlab: CVE-2026-110264: Integer Overflow or Wraparound

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

ALSA-2026:88247 Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

openSUSE 16 Security Update : aliyun-cli (openSUSE-SU-2026:22140-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22140-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...

Oracle Linux 9 : php (ELSA-2026-87151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87151 advisory. - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire...

PT-2026-121516

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A 32-bit integer wraparound occurs in the Windows-only Kerberos/SSPI authentication code. When an excessively long credential value is provided in the client connection configuration...

GitLab numeric error vulnerability

A numerical error vulnerability exists in GitLab CE/EE versions from 7.0 up to and including 18.11.13, in version 19.0 prior to 19.0.10, in version 19.1 prior to 19.1.9, in version 19.2 prior to 19.2.9, in version 19.3 prior to 19.3.6, in version 19.4 prior to 19.4.3, and in version 19.5 prior to...

sahlberg libsmb2 numeric error vulnerability

Versions of sahlberg libsmb2 prior to 6.3 contain a numeric error vulnerability. This vulnerability stems from an integer overflow in the DCE/RPC NDR decoder within lib/dcerpc.c. It may allow malicious SMB servers or intermediates on unsigned connections to send specially crafted NetrShareEnum...

Bridging Number-Theoretic Primality Testing and Algorithmic Optimization: An Adaptive Cryptographic Framework

The security of modern public-key cryptographic systems, such as RSA, Diffie-Hellman, and ECC, depends entirely on the computational intractability of the integer factorization and discrete logarithm problems. For these asymmetric algorithms to operate, a core requirement is that the system must ...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142697 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpucspass1 The type of size is unsigned int, if size is...

ALSA-2026:88248 Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

RHEL 9 : expat (RHSA-2026:88247)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88247 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...

expat security update

2.5.0-6.7 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - Resolves: RHEL-272833 2.5.0-6.6 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer over-read in XMLParseBuffer - Resolves: RHEL-277510...