RHEL 9 : tftp (RHSA-2026:80663)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80663 advisory. The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server...

AlmaLinux 9 : kernel (ALSA-2026:86033)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

RockyLinux 8 : tftp (RLSA-2026:78952)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:78952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CLSA-2026-1792490933 hplip: Fix of 7 CVEs

CVE-2026-91097: bound LEDM HTTP response copies in httpread of the SANE hpaio backend stack buffer overflow backport of HPLIP 3.26.6 and RHEL c9s - CVE-2026-91098: bound device-supplied data in the LEDM scan backend resolution lists, job Location header, BinaryURL and chunk size parsing...

Cisco Open Source Snort3 Authorization Issue Vulnerability

The Cisco Open Source Snort3 has an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the control channel socket implementation. It may allow authenticated, low-privilege local attackers to execute arbitrary commands as the Snort 3 process user, and to...

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: Denial-of-service in ntfsinodeattachallextents bsc1281758. Heap buffer overflow in ntfsaclowner bsc1281756. Heap buffer overflow in ntfscheckrestartarea bsc1281759. Heap buffer overflow in ntfseacheckwsldev bsc1281760. Heap buffer...

SUSE-SU-2026:4764-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap buffer overflow in ntfscheckrestartarea bsc1281759. - Heap buffer overflow in ntfseacheckwsldev bsc1281760. - Heap...

Oracle Linux 9 : mod_auth_openidc (ELSA-2026-79177)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-79177 advisory. 2.4.16.11-1.1 - Resolves: RHEL-248048 - CVE-2026-54789 out-of-bounds read/write in oidcstatecookiescleanexpired when a state-prefixed cookie token contains no...

PT-2026-134143

This update for ntfs-3g ntfsprogs fixes the following issues: - Denial-of-service in ntfs inode attach all extents bsc1281758. - Heap buffer overflow in ntfs acl owner bsc1281756. - Heap buffer overflow in ntfs check restart area bsc1281759. - Heap buffer overflow in ntfs ea check wsldev...

Vulnerability related to permission and access control issues in Red Hat StreamsHub Console for Apache Kafka

A permission and access control vulnerability exists in Red Hat StreamsHub Console for Apache Kafka versions 0.2.0 through 0.12.10 and 0.13.0 through 0.14.2. This vulnerability arises because a Kubernetes tenant with permission to create custom Console resources can set...

Rocky Linux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.6:CLSA-2026:1792511364)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792511364 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must n...

AlmaLinux 9 : tftp (ALSA-2026:80663)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:80663 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fr...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

CVE-2026-112257

A heap out-of-bounds read and write vulnerability exists in GIMP within the PSD thumbnail resource loader (specifically load_resource_1033). The flaw occurs because the loader performs a BGR-to-RGB channel swap using a fixed 3-byte stride without verifying that the JPEG thumbnail is actually in R...

CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

RisingWave Labs risingwave authorization issue vulnerability

Versions of RisingWave Labs prior to 3.1.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks; low-privilege SQL users can create a POSIX FS source and a FS receiver to read/write arbitrary server files. This may result in the reading...

Red Hat: CVE-2026-112257: gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

RHEL 10 : kernel (RHSA-2026:85321)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85321 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel...