CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS7:CLSA-2026:1771855171)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1771855171 advisory. - A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or...

CentOS Linux 8.5 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS8.5:CLSA-2026:1771412927)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1771412927 advisory. - A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or...

CentOS Linux 6 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776605836)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776605836 advisory. - In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buff...

CentOS Linux 8.4 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS8.4:CLSA-2026:1771412328)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1771412328 advisory. - A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or...

CVE-2026-102760

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

CVE-2026-102760

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

CVE-2026-102760

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

CVE-2026-102760

When NetX Secure is built with NX_SECURE_KEY_CLEAR, a vulnerability exists where TLS records are wiped after being handed to the TCP layer . Because the TCP layer may have already released the packet chain back to the packet pool , the wipe operation writes zeros into packets that are free or in ...

CVE-2026-18747

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rxctxt-nb-len -= 2U; in mcumgrserialprocessfrag subsys/mgmt/mcumgr/transport/src/serialutil.c. mcumgrserialextractlen accepted a...

PT-2026-102772

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description When built with NX SECURE KEY CLEAR, the software wipes every TLS record sent on an active session after it is handed to TCP. Because the TCP layer may have already released the packet...

glib2 security update

2.56.1-9.0.9 - Backport fix for CVE-2026-15588 Orabug: 39995948 - Backport fix for CVE-2026-58010 Orabug: 39995948 - Backport fix for CVE-2026-58011 Orabug: 39995948 - Backport fix for CVE-2026-58012 Orabug: 39995948 - Backport fix for CVE-2026-58013 Orabug: 39995948 - Backport fix for...

CVE-2026-102760: Use After Free

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

Oracle Linux 7 : ELSA-2026-65773-0: / glib2 (ELSA-2026-657730)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-657730 advisory. - Backport fix for CVE-2026-15588 Orabug: 39995948 - Backport fix for CVE-2026-58010 Orabug: 39995948 - Backport fix for CVE-2026-58011 Orabug:...

CVE-2026-18747

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rxctxt-nb-len -= 2U; in mcumgrserialprocessfrag subsys/mgmt/mcumgr/transport/src/serialutil.c. mcumgrserialextractlen accepted a...

OPENSUSE-SU-2026:21997-1 Security update for aria2

This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0 be1caa2d bsc1257934...

Linux Distros Unpatched Vulnerability : CVE-2026-97991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpasimblk: reject out-of-range sector starts vdpasimblkcheckrange logs an invalid start sector but continues validating the request. The subsequent unsigned...

DEBIAN-CVE-2026-93783

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcommrecvframe rfcommrecvframe casts skb-data to struct rfcommhdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than the...

CVE-2026-93783

The Linux kernel contains a vulnerability in the Bluetooth RFCOMM component within the rfcomm_recv_frame() function. The root cause is a missing length validation when casting skb->data to struct rfcomm_hdr. This allows a truncated frame to trigger an out-of-bounds read of uninitialized memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: c-ares (UTSA-2023-002303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002303 advisory. c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular 0::00:00:00/2 was found to...

CVE-2026-10858

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...