GHSA-7Q5M-QV9W-C8XX vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-GFR2-Q5Q8-V55V vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-GVRM-XH5G-W8V6 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-MRV3-46FP-R6HH vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

GHSA-PW9R-H2M6-6VVG vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

CVE-2026-53225 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

CVE-2026-53212 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-aws, linux-gcp, linux-vmware...

Important: expat

Issue Overview: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers. CVE-2026-56132 Affected Packages: expat Note: This advisory is applicable to...

Important: ruby

Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in...

Medium: qt5-qt3d

Issue Overview: A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possib...

Important: tigervnc

Issue Overview: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffe...

Important: util-linux

Issue Overview: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c CVE-2026-53615 Affected Packages: util-linux Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Medium: containerd

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Medium: containerd

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Important: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and...

Medium: opensc

Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...

Important: gstreamer1-plugins-good

Issue Overview: Heap buffer overflow in the Matroska MKV demuxer when calculating decompressed buffer sizes for bz2-compressed tracks. The issue occurs due to missing parentheses in the buffer size calculation, causing incorrect memory allocation and potential out-of-bounds writes. from...

Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-134 (ALASDOCKER-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-134 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...