Rocky Linux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...

Linux Distros Unpatched Vulnerability : CVE-2025-55640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a...

ROS-20261023-73-0097

The vulnerability in libxml2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux kernel Metronomefb DoS

The vulnerability in the metronomefbprobe function within the drivers/video/fbdev/metronomefb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...

Linux ip_vs_core Heap Buffer Overflow DoS

The vulnerability of the net/netfilter/ipvs/ipvscore.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

SUSE SLED15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4836-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4836-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl...

ConnMan buffer error vulnerability

ConnMan versions 2.0 and earlier contain a buffer error vulnerability. This vulnerability arises because the getdomains function fails to properly limit the length of the DOMAINLIST option when processing DHCPv6 REPLY. As a result, DNS label traversal can lead to out-of-bounds reads and writes in...

Pillow 12.3.0 JPEG Decoder Heap Buffer Overflow

Pillow version 12.3.0 and earlier contain a heap buffer overflow in ImagingJpegDecode when thumbnail processes an 8-bit lossless SOF3 JPEG with libjpeg-turbo 3.x. https://packetstorm.news/download/237261...

PT-2026-121689

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

UBUNTU-CVE-2026-55543

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, a...

FreeRDP 3.31.1 Integer Truncation Heap Buffer Overflow

FreeRDP versions 3.0.0 through 3.31.1 contain an integer truncation vulnerability in licensecheckstreamlength that lets a malicious RDP server trigger a heap buffer overflow on 32-bit clients...

PT-2026-122190

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get domains in gdhcp/client.c. It copies a fixed NS MAXDNAME 1025 bytes from a DHCPv6 DOMAIN LIST option 24 value into a 1026-byte stack buffer dns name regardless of the actual option length, then...

ROS-20261023-73-0090

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a corrupted file...

ROS-20261023-73-0093

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

ROS-20261023-73-0022

The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-121859

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled scan built the probe request before iwl mvm scan fits, so oversized IEs could be copied into the fixed preq buffer before length validation. Move iwl mvm build scan probe aft...

Linux Distros Unpatched Vulnerability : CVE-2025-60480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers t...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420 1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CM...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

nginx 1.30.x < 1.30.6 / 1.31.2 < 1.31.7 Heap Buffer Overflow

According to its Server response header, the installed version of nginx is 1.30.0 prior to 1.30.6, or 1.31.2 prior to 1.31.7. It is, therefore, affected by the following issue: - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root...