GHSA-5Q2P-7748-G6QP vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-5R3H-V82J-R7RR vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-62M5-M548-5V5F vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-6GQ6-HXJH-9GRQ vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-7Q5M-QV9W-C8XX vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-FGQH-527Q-6HX4 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-FJ73-9FR6-G7MW vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-GFR2-Q5Q8-V55V vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-GM9P-3W2C-C6QG vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-GVRM-XH5G-W8V6 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-HFRJ-R4V7-3997 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-PW9R-H2M6-6VVG vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

Important: expat

Issue Overview: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers. CVE-2026-56132 Affected Packages: expat Note: This advisory is applicable to...

Important: ruby

Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in...

Medium: qt5-qt3d

Issue Overview: A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possib...

Important: tigervnc

Issue Overview: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffe...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3497 (ALAS-2026-3497)

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3497 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...

Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3786 (ALAS-2026-3786)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3786 advisory. ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data wher...

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3795 (ALAS-2026-3795)

The version of thunderbird installed on the remote host is prior to 140.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3795 advisory. Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR...