kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

A flaw was found in the Linux kernel's nfconntrackh323 helper. A remote attacker could exploit this by sending a specially crafted Q.931 SETUP message to port 1720 through a firewall with the nfconntrackh323 helper active. This memory corruption vulnerability leads to an out-of-bounds read, which...

Important: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2026-95110

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A heap-based buffer overflow occurs in the TLS transport layer of the MongoDB C Driver when using the Windows platform TLS backend. A remote endpoint can cause the driver to write...

EulerOS 2.0 SP15 : perl (EulerOS-SA-2026-3813)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.x000D x00...

CVE-2026-89085

heap buffer overflow in initfats / fattableread...

CVE-2026-89088

heap buffer overflow in duplicatelegacyrootdir...

UBUNTU-CVE-2026-89085

heap buffer overflow in initfats / fattableread...

UBUNTU-CVE-2026-89088

heap buffer overflow in duplicatelegacyrootdir...

PT-2026-99685

This update for memcached fixes the following issue: - heap buffer overflows in default-config LRU-crawler metadump and proxy backend-response length truncation bsc1270716...

RHEL 10 : libvirt (RHSA-2026:68510)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68510 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 8 : virt:rhel (RHSA-2026:68594)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68594 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contai...

EulerOS 2.0 SP15 : perl (EulerOS-SA-2026-3788)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.x000D x00...

FreeBSD : mkvtoolnix -- Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound (a738c927-b216-11f1-bc39-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a738c927-b216-11f1-bc39-5404a68ad561 advisory. Moritz Bunkus reports: potential heap overflows/invalid memory access in the ODML index handling due to...

AlmaLinux 9 : corosync (ALSA-2026:67873)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67873 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

MiracleLinux 9 : openssl-3.5.8-1.el9_8.ML.1 (AXSA:2026-1865:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1865:17 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...

RHEL 9 : libvirt (RHSA-2026:68514)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68514 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 9 : libvirt (RHSA-2026:68511)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68511 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

EulerOS 2.0 SP15 : openssl (EulerOS-SA-2026-3812)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destinationx000D buffer for Unicode output in ASN1mbstringncopy can lead to a heapx000D...

RHEL 9 : libvirt (RHSA-2026:68509)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68509 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-109813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109813 advisory. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an...