Rocky Linux 9.6 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791806541)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791806541 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages...

RHEL 10 : gd (RHSA-2026:80500)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80500 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other...

RHEL 8 : compat-openssl10 (RHSA-2026:80510)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:80510 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is...

ROS-20261012-73-0225

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-80510)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80510 advisory. 1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Tenable has extracted the preceding description block directl...

ALSA-2026:80510 Important: compat-openssl10 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1. Security Fixes: openssl:...

PT-2026-110986

Name of the Vulnerable Software and Affected Versions odhcpd versions prior to commit cfddd56 Description An unauthenticated host on the same link can disrupt the DHCPv6 service by sending a crafted RENEW request containing multiple IA NA options after obtaining two bindings. This process trigger...

PT-2026-110822

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description A buffer overflow occurs in the /goform/formWlSiteSurvey endpoint due to the manipulation of the ifname argument. This flaw allows for remote exploitation. Recommendations At the moment, there is no...

CVE-2026-104332: Stack-based Buffer Overflow

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table...

ROS-20261012-73-0131

The vulnerability of the cgroupstoragegetnextkey function in the kernel/bpf/localstorage.c module, which is part of the Linux operating system’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

EulerOS 2.0 SP13 : lmdb (EulerOS-SA-2026-4160)

According to the versions of the lmdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the...

gd security update

2.3.2-3.1 - Fix buffer overflow and use of uninitialized memory in GIF decoding CVE-2026-9672 Related: RHEL-259613...

EulerOS 2.0 SP13 : wget (EulerOS-SA-2026-4114)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

TencentOS Server 4: gd (TSSA-2026:1076)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4350)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Linux Distros Unpatched Vulnerability : CVE-2026-108978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie:...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2026-4388)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2...

EulerOS 2.0 SP13 : vim (EulerOS-SA-2026-4204)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method...

EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2026-4343)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...