AlmaLinux 9.2 [TuxCare] Security Update: mutt Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791192215)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791192215 advisory. - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest. CVE-2026-43859 - mutt before 2.3.2...

[SECURITY] Fedora 45 Update: pam_mount-2.20-8.fc45

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon and where statically mounting the entire /home from a server is a security risk, or listing all possible volumes in...

Rocky Linux 8 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc (crlsa-2021_3079)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213079 advisory. 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed CVE-2021-3652 Tenable has extracted the preceding description block directly from...

Wireshark Dot11DecryptFtMicCheck Buffer Overflow DoS

The vulnerability of the Dot11DecryptFtMicCheck function epan/crypt/dot11decrypt.c, a traffic analyzer for computer networks in Wireshark, is related to the operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures...

EUVD-2026-86479

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

Perl-Crypt-DSA Digital Signature File Access Unauthorized Information Disclosure

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Perl-Crypt-DSA DoS

The vulnerability of the Perl-Crypt-DSA digital signature package is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...

Perl-Crypt-DSA Insufficient Randomness Unauthorized Access

The vulnerability of the Perl-Crypt-DSA digital signature package is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Perl-Crypt-DSA Data Compromise

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

CVE-2026-97230

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

CVE-2026-97230: Embedded Malicious Code

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

CVE-2026-95831

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

EUVD-2026-84745

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

CVE-2026-95831 Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

CVE-2026-95831 Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

CVE-2026-95831

Perl's Crypt::SelfCertificate versions 1.01 through 1.05 contain embedded malware. The generate_certificate function executes a Python script hidden within a certificate file. This script retrieves and executes code directly from a hardcoded, base64-encoded HTTP URL. This allows for arbitrary cod...

CVE-2026-95831: Embedded Malicious Code

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

PT-2026-96963

Name of the Vulnerable Software and Affected Versions Crypt::SelfCertificate versions 1.01 through 1.05 Description This software contains malware that executes Python code retrieved from an obfuscated URL. The generate certificate function runs a Python script disguised as a certificate file,...

OESA-2026-3929 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

EUVD-2026-82214

In the Linux kernel, the following vulnerability has been resolved: crashdump: release keyring reference at the correct time restoredmcryptkeystothreadkeyring gets a reference to the user keyring before restoring the saved dm-crypt keys. The same keyring reference is then passed to addkeytokeyrin...