SUSE-SU-2026:23910-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

OPENSUSE-SU-2026:21944-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

CVE-2026-63274

A flaw was found in LibreOffice. When a user imports a specially crafted PDF document with LibreOffice Draw, a heap-based buffer overflow can occur due to improper validation of the stream length. This issue can cause memory corruption, resulting in an application crash. Mitigation Do not import...

SUSE CVE-2026-95508

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

Vulnerabilities found in IBM Langflow OSS and IBM MQ Appliance

IBM has identified 12 vulnerabilities in IBM MQ, IBM MQ Appliance, and Langflow OSS. These vulnerabilities could allow for the execution of arbitrary code or commands. Four of these vulnerabilities are classified as critical and can be exploited without authentication or user interaction. The...

Exploit for CVE-2026-94127

CVE-2026-94127 — F5 BIG-IP APM Detection Tool Defensive A...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

Overview On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer overflow vulnerability affecting F5 BIG-IP Access Policy Manager APM. The vulnerability has a CVSS v3.1 score of 9.8. An unauthenticated attacker with network access to an affected...

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager APM that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5...

CVE-2026-88806

A flaw was found in libX11. A heap-based buffer overflow vulnerability exists during the handling of XkbGetMap replies. A remote attacker, by operating a malicious X server, could exploit this flaw to potentially execute arbitrary code or cause a denial of service on the client system. User...

RLSA-2026:69277 Important: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 For more details about the security issues, includin...

corosync security update

An update is available for corosync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for Roc...

MGASA-2026-0434 Updated diffutils packages fix a security vulnerability

Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...

Updated diffutils packages fix a security vulnerability

Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...

F5 BIG-IP APM Version 21.1.0 OAuth Vulnerability Detection

F5 BIG-IP APM versions 17.1.0, 17.5.0, and 21.1.0 before their listed engineering hotfixes contain a heap-based buffer overflow when an APM access policy and OAuth profile are configured on the same virtual server. The included tool performs read-only version and configuration checks...

RockyLinux 8 : corosync (RLSA-2026:69277)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69277 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

MiracleLinux 8 : corosync-3.1.8-1.el8_10.2 (AXSA:2026-1890:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1890:06 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the...

TencentOS Server 4: ghostscript (TSSA-2026:1047)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1047 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RHEL 9 : glib2 (RHSA-2026:70636)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70636 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...