AlmaLinux 9.2 [TuxCare] Security Update: avahi / avahi-autoipd / avahi-compat-howl / avahi-compat-howl-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785765391)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785765391 advisory. - Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlie...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2025:1762536892)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1762536892 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up...

CVE-2026-97940

A flaw was found in the Linux kernel's IPv6 routing subsystem. A race condition during route iteration termination can allow an internal routing table walker structure to remain on an active list after its associated memory is released. A local user could exploit this flaw during concurrent route...

UBUNTU-CVE-2026-102621

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and migh...

CVE-2026-102621 Freedesktop Poppler SplashClip.cc clipToPath integer overflow

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and migh...

CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

DEBIAN-CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

UBUNTU-CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

CVE-2026-102620 Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

CVE-2026-97931

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture US122L audio driver, which can lead to memory corruption or a Denial of Service DoS. The driver improperly permits read-only memory mappings to be upgraded to writable. A local user with read and write permissions to th...

CVE-2026-102317

Google Chrome on Windows versions prior to 154.0.8037.92 is affected by an improper privilege management vulnerability within the Mojo inter-process communication (IPC) framework. A local attacker can exploit this flaw by running a crafted local program to bypass the browser's sandbox security bo...

CVE-2026-97925

A flaw was found in the Linux kernel's timer tick broadcast subsystem. A race condition occurs when installing a replacement clock event device concurrently with ongoing tick broadcast operations, causing the system to attempt to arm a detached timer device. If the central processing unit CPU...

CVE-2026-97924

A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...

CVE-2026-97922

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...

CVE-2026-76737

A path traversal vulnerability exists in the command line interface of HPE Networking Instant On . This authenticated vulnerability allows an attacker with administrative access to modify a limited set of files on the underlying operating system and interrupt the normal operation of the affected ...

CVE-2026-76736

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On . A low-privilege authenticated local attacker could successfully exploit this flaw to interrupt the normal operation of the affected service, leading to a Denial-of-Service (DoS). No specific e...

EUVD-2026-89355

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

CVE-2026-76736 Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

CVE-2026-76735 Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to netwo...

CVE-2026-12345

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...