Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

RHEL 8 : qt5-qtbase (RHSA-2026:65897)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65897 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

RHEL 10 : qt6-qt5compat (RHSA-2026:65816)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65816 advisory. Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more...

RockyLinux 10 : qt6-qt5compat (RLSA-2026:65816)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65816 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

ALSA-2026:65897 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

DoS (Denial of Service) io.netty:netty-codec Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

[SECURITY] [DSA 6486-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6486-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2026 https://www.debian.org/security/faq -...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 13.0.2 Vulnerability Details CVEID:CVE-2026-44249 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, ...

[SECURITY] [DLA 4774-1] aom security update

Debian LTS Advisory DLA-4774-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson September 06, 2026 https://wiki.debian.org/LTS Package : aom Version : 3.6.0-1+deb12u3 CVE ID : CVE-2026-56208 CVE-2026-56209 CVE-2026-56210 CVE-2026-56211 Debian Bug : 1140428...

Debian dsa-6486 : libde265-0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6486 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6486-1 [email protected] https://www.debian.org/securit...

Debian dla-4774 : aom-tools - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4774 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4774-1 [email protected]...

OESA-2026-3601 aom security update

The Alliance for Open Media’s focus is to deliver a next-generation video format that is: Security Fixes: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows ...

SUSE CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

AZL-99549 CVE-2026-80910 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

CVE-2026-80910

CVE-2026-80910 affects the Linux kernel's lpass-wsa-macro ASoC codec driver. The root cause is that the get and put callbacks for the "EAR SPKR PA Gain" and four "WSA RX Mux" * enumerated controls access the value via ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enum...

Linux Distros Unpatched Vulnerability : CVE-2026-80910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain and the four WSA RX Mux controls are enumerated, but their get and put callbacks acce...

Security Bulletin: MongoDB Enterprised Advanced affected by: CRLF Injection (CVE-2026-41417)

Summary There are vulnerabilities in netty-codec-http-4.1.132.Final.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-41417. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-41417 DESCRIPTION: Netty allows request-line validation to be bypassed when a...