Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

Amazon Linux 2 : gimp (ALASGIMP-2026-021)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-021 advisory. A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not...

TencentOS Server 3: perl-YAML-Syck (TSSA-2026:1114)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1114 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4237)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

Rocky Linux 9.6 [TuxCare] Security Update: opensc (ALMALINUX9.6:CLSA-2026:1791470029)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791470029 advisory. - A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file...

TencentOS Server 4: gd (TSSA-2026:1076)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-110682

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.1-7 through 7.1.2-31 Description A heap buffer over-read occurs due to incorrect string termination in XMP profiles, which are metadata formats used to describe the creation and history of a digital asset. An attacker...

PT-2026-110667

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description A heap buffer overflow occurs in the collect keys function during PKCS11 key enumeration. Local attackers can exploit this by using smartcard tokens that present more than 64 public key objects...

PT-2026-110822

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description A buffer overflow occurs in the /goform/formWlSiteSurvey endpoint due to the manipulation of the ifname argument. This flaw allows for remote exploitation. Recommendations At the moment, there is no...

PT-2026-110672

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An integer truncation issue exists in the license check stream length function. A malicious RDP server can exploit this by sending a crafted SERVER LICENSE REQUEST containing a large scopeCount...

Important: compat-openssl10 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1. Security Fixes: openssl:...

Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping...

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

Important: rpcbind

Issue Overview: A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server...

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 For more details about the security issues, including the impact, a CVSS...

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

EulerOS 2.0 SP13 : radvd (EulerOS-SA-2026-4102)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...