Moderate: Red Hat Security Advisory: fetchmail security update

An update for fetchmail is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01)

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

Security Bulletin: Vulnerabilities in libxml2 (CVE-2026-86140, CVE-2026-86141, CVE-2026-86143, CVE-2026-86144) affect AIX.

Summary Vulnerabilities in libxml2 could cause stack-based buffer overflow CVE-2026-86140, A NULL pointer dereference CVE-2026-86141, An integer overflow CVE-2026-86143, denial-of-service CVE-2026-86144. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details...

Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.

Summary The xorg-x11-server, modhttp2,httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries are used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. The applicable CVEs are as follows: CVE-2026-33999,...

CVE-2026-112062

A flaw was found in lwIP. An adjacent attacker on the local network can cause a Denial of Service DoS by sending specially crafted multicast Domain Name System mDNS responses with invalid domain names or record lengths. Processing these malformed packets during a service search triggers a...

CVE-2026-112063

A flaw was found in libstrophe. A malicious XMPP Extensible Messaging and Presence Protocol server can exploit a stack-based buffer overflow in the SCRAM Salted Challenge Response Authentication Mechanism authentication handler by sending an oversized salt value. This issue allows an attacker to...

Vulnerabilities in libxml2 (CVE-2026-86140 CVE-2026-86141 CVE-2026-86143 CVE-2026-86144) affect AIX

IBM SECURITY ADVISORY First Issued: Wed Oct 21 05:56:41 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory12.asc Security Bulletin: Vulnerabilities in libxml2 CVE-2026-86140, CVE-2026-86141, CVE-2026-86143,...

CVE-2026-113744

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The...

SUSE CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

EUVD-2026-107031

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The...

CVE-2026-113744

The Tenda AC19 running firmware version 16.03.10.07 is susceptible to a stack-based buffer overflow in the httpd Web Management Service . The vulnerability exists within the formSetFirewallCfg function located in the /goform/SetFirewallCfg file. Specifically, improper handling of the firewallEn a...

CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The...

EUVD-2026-106870

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system...

ALSA-2026:86981 Moderate: fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Moderate: fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Moderate: fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

RHEL 9 : fetchmail (RHSA-2026:86981)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86981 advisory. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail...

RockyLinux 10 : fetchmail (RLSA-2026:85959)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85959 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description blo...

RHEL 8 : fetchmail (RHSA-2026:86982)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86982 advisory. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail...

RockyLinux 9 : fetchmail (RLSA-2026:86981)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:86981 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description bloc...