Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146133 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read...

Eclipse ThreadX – NetX Duo buffer error vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lack of boundary checks in the NetX Secure’s TLS 1.3 Certificate message parser. It may allow malicious TLS 1.3 servers to trigger unsigned integer overflows and heap...

GIMP buffer error vulnerability

GIMP has a buffer error vulnerability. This vulnerability stems from the PSD thumbnail loader using a fixed 3-byte step for BGR-to-RGB channel swapping, without verifying whether the JPEG thumbnail is in RGB format. Specialized grayscale PSD thumbnails can lead to out-of-bound read and write...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 has a security vulnerability. This vulnerability arises from the fact that the function ipv6findhdr does not verify whether the length of the extended header exceeds the end of the packet. As a result, the offset may point outside the packet’s end. In this case,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of strict validation for the length of the SEG6ATTRDST attribute. This allows shorter payloads, resulting in out-of-bound reads of 16-byte segments of uninitialized kernel heap memory. This vulnerability can be exploited throu...

Johannes Kuhlmann cgltf buffer error vulnerability

Johannes Kuhlmann’s cgltf versions prior to 1.15 contain a buffer error vulnerability. This vulnerability stems from the cgltfaccessorunpackfloats function, which advances the cursor based on the byteStride of the base bufferView when handling sparse values. This allows for heap out-of-bound...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.10.28 to 5.11, 5.11.11 to 5.12, and 5.12 itself. These vulnerabilities stem from releasing a bpf program that is linked to trampoline without waiting for the RCU task timeout period. Preemptive tasks may call this program after it is...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contains a “Out of Bound Read” issue in the xrdpmmtransprocessdrdynvcchannelclose function. There are no known solutions to this problem. Users are advis...

EulerOS 2.0 SP13 : mtr (EulerOS-SA-2026-4164)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can...

EulerOS 2.0 SP11 : mtr (EulerOS-SA-2026-4346)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can...

EulerOS 2.0 SP13 : mtr (EulerOS-SA-2026-4073)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can...

EulerOS 2.0 SP11 : mtr (EulerOS-SA-2026-4256)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_0366)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220366 advisory. vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_11861)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511861 advisory. kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel:...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1778756832)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1778756832 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The...

[SECURITY] [DLA 4804-1] libsmpp34 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4804-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 30, 2026 https://wiki.debian.org/LTS -...

CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel Multiple Vulnerabilities (CENTOS7:CLSA-2025:1752126372)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1752126372 advisory. - A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This flaw allows a...

AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1750784473)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750784473 advisory. - A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This flaw allo...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2025:1748366748)

"The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2025:1748366748 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The...