Important: php8.5

Issue Overview: The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined...

ALSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

ALSA-2026:80687 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

ALSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

EulerOS 2.0 SP13 : gzip (EulerOS-SA-2026-4052)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

Amazon Linux 2 : libX11 (ALAS-2026-3977)

The version of libX11 installed on the remote host is prior to 1.6.7-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3977 advisory. A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2026-4342)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap...

TencentOS Server 3: perl-YAML-Syck (TSSA-2026:1114)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1114 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Amazon Linux 2023 : parted, parted-devel (ALAS2023-2026-3189)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3189 advisory. heap buffer overflow in initfats / fattableread NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html CVE-2026-89085 heap buffer overflow in...

EulerOS 2.0 SP11 : gawk (EulerOS-SA-2026-4317)

According to the versions of the gawk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer overflow vulnerability has been found in 'extension/readdir.c' program file of gawk ftype routine. This issue could be used to crash the...

Amazon Linux 2 : qt5-qt3d (ALAS-2026-3994)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3994 advisory. A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerabili...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791327169)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791327169 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow...

EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2026-4252)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP11 : gawk (EulerOS-SA-2026-4226)

According to the versions of the gawk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer overflow vulnerability has been found in 'extension/readdir.c' program file of gawk ftype routine. This issue could be used to crash the...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791822829)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791822829 advisory. - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined...

EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4058)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS 2.0 SP11 : radvd (EulerOS-SA-2026-4374)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4327)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2026-4296)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP...