wireshark security update

4.4.2-10.0.1.el102.8 - Fix post script to not fail during initial installation Orabug: 37565359 1:4.4.2-10.8 - Fix Heap-based Buffer Overflow in Wireshark CVE-2026-95389 - Resolves: RHEL-272823 1:4.4.2-10.7 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves:...

MiracleLinux 9 : hplip-3.26.6-1.el9_8.3 (AXSA:2026-2085:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2085:06 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution a...

Linux Distros Unpatched Vulnerability : CVE-2026-112021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by...

CVE-2026-112021

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

CVE-2026-112008

A flaw was found in libmng. A heap-based buffer overflow vulnerability exists in the mngreadordr function due to improper buffer allocation sizing when parsing chunk records in Multiple-image Network Graphics MNG files. An attacker could exploit this vulnerability by enticing a user or system to...

CVE-2026-112021

The snac2 software prior to version 2.93 is vulnerable to a heap-based buffer overflow in the _xs_json_load_lexer() function. An unauthenticated remote attacker can trigger this by sending a crafted application/activity+json POST request to activitypub_post_handler(). The vulnerability occurs bec...

CVE-2026-112021 snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

EUVD-2026-103474

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112021

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

EUVD-2026-103461

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

Linux Distros Unpatched Vulnerability : CVE-2026-112008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers...

PT-2026-116612

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng read ordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

Updated parted package fixes security vulnerabilities

A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application...

EUVD-2026-103202

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

EUVD-2026-103203

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...

EUVD-2026-103187

A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR .pvr file, an attacker can trigger a heap-based buffer overflow, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2017-20286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loadi...

NoMachine mDNS Heap-based Buffer Overflow

NoMachine versions prior to 10.1.7, 9.9.6, and 8.27.1 contain an mDNS resource-record parsing heap-based buffer overflow that allows network-adjacent unauthenticated attackers to execute code in the service account context...