RockyLinux 9 : openexr (RLSA-2026:86983)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or...

Rocky Linux 10.2 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc Multiple Vulnerabilities (crlsa-2026_84796)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684796 advisory. OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 OpenEXR: OpenEXR: Out-of-bounds write...

ALSA-2026:86983 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

RHEL 9 : openexr (RHSA-2026:86983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:86983 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: expat (UTSA-2026-142320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142320 advisory. Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers...

RHEL 8 : perl-DBI:1.641 (RHSA-2026:85916)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85916 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

Linux Distros Unpatched Vulnerability : CVE-2026-109281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds o...

Fedora 43 : perl-Net-IDN-Encode (2026-4aec7019eb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4aec7019eb advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

Linux Distros Unpatched Vulnerability : CVE-2026-91380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions...

Unity Linux 20.1070a Security Update: libXfont2 (UTSA-2026-141785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141785 advisory. fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142333 advisory. An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-109253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming...

CVE-2025-71438

An out-of-bounds read vulnerability exists in the gf_odf_ac4_cfg_dsi_v1 function (located in /odf/descriptors.c) of the GPAC Project/MP4Box software before version v26.07.0 . An attacker can exploit this flaw by providing a crafted AC4 file to trigger a Denial of Service (DoS) . While the vulnera...

ROS-20261021-73-0025

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: flatpak (UTSA-2026-142347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142347 advisory. In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code executi...

RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:85916)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-87291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable...

CentOS Linux 8.4 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792591710)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792591710 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

PT-2026-120569

The Discovery naming-service reply parser in Apache bRPC versions 1.18.0 calls RapidJSON object-only accessors FindMember on JSON values without first validating that those values are objects. A malformed Discovery response whose data/service members or instances list contain non-object entries...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 26.07.0. This vulnerability stems from an out-of-bounds read in the gfodfac4cfgdsiv1 function located at /odf/descriptors.c, which may allow attackers to cause a denial of service by providing a specially crafted AC4 file...