AlmaLinux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792600325)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792600325 advisory. - A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2026-142302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142302 advisory. A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separate...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2026-142352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142352 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N...

Fedora 44 : perl-GD-SecurityImage (2026-3bf1e0b3f9)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3bf1e0b3f9 advisory. Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-142315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142315 advisory. A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the soupmessagenew function, could inject arbitrary headers and additional...

RHEL 8 : glibc (RHSA-2026:80798)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80798 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

Fedora 43 : perl-GD-SecurityImage (2026-bdeade52d9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bdeade52d9 advisory. Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2026-142298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142298 advisory. A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component...

Linux kernel rpcrdma_xprt_connect Heap Buffer Overflow DoS

The vulnerability of the rpcrdmaxprtconnect function in the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 10 : glibc (RHSA-2026:76781)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76781 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

Linux Distros Unpatched Vulnerability : CVE-2026-98869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This...

PT-2026-120841

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

CVE-2025-60497

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

Linux kernel Host1x DoS

The vulnerability of the host1xdeviceadd function in the drivers/gpu/host1x/bus.c kernel module of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792572593)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792572593 advisory. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size...

CVE-2025-60479

A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...

FreeRDP BMP Recording Heap Buffer Overflow DoS

The vulnerability of the clipboardsynthesizeimageformattobmp function in the FreeRDP BMP recording module is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-120829

Name of the Vulnerable Software and Affected Versions Rex versions prior to 1.16.2 Description The software accepts unknown SSH host keys during remote rsync transfers because the sync function hardcodes the StrictHostKeyChecking=no option. This occurs across all remote branches of sync, includin...

CVE-2025-60487

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

CVE-2025-60490

A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...