Medium: mariadb114

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

CVE-2026-109301: Uncaught Exception

Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery, causing an uncaught exception that terminates the process. Attackers able to write to a class with Cloud Code save, find, or delet...

ALSA-2026:80817 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

PT-2026-110780

Name of the Vulnerable Software and Affected Versions ZcashFoundation Zebra versions 6.4.0 through 6.4.1 Description The software incorrectly parses version 6 transactions that carry a pre-NU6.3 consensus branch ID. During the construction of UnminedTx, the size computation assumes that the...

PT-2026-110988

Name of the Vulnerable Software and Affected Versions IBM Maximo AI Service version 9.1.0 IBM Maximo AI Service version 9.2.0 Description A remote attacker can cause a denial of service by triggering uncontrolled resource consumption. Recommendations At the moment, there is no information about a...

PT-2026-110782

Name of the Vulnerable Software and Affected Versions Zebra versions prior to 6.4.0 Description An uncontrolled resource consumption issue allows unauthenticated peers to force full proof verification by serving forged block bodies that possess valid header hashes. By flipping authorizing-only...

Cisco NX-OS Resource Restriction DoS

The vulnerability of the Cisco NX-OS operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions remotely...

ALSA-2026:80825 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Important: compat-openssl10 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1. Security Fixes: openssl:...

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-4279)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...

EulerOS 2.0 SP13 : samba (EulerOS-SA-2026-4196)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly...

EulerOS 2.0 SP11 : glibc (EulerOS-SA-2026-4230)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's...

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:1154)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1154 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3168)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3168 advisory. containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in...

EulerOS 2.0 SP13 : perl (EulerOS-SA-2026-4081)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in...

EulerOS 2.0 SP13 : samba (EulerOS-SA-2026-4105)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly...

EulerOS 2.0 SP11 : perl-Storable (EulerOS-SA-2026-4362)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

EulerOS 2.0 SP11 : rsyslog (EulerOS-SA-2026-4377)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

TencentOS Server 4: gd (TSSA-2026:1076)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...