RLSA-2026:69277 Important: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 For more details about the security issues, includin...

MGASA-2026-0434 Updated diffutils packages fix a security vulnerability

Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...

Updated diffutils packages fix a security vulnerability

Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...

MiracleLinux 8 : corosync-3.1.8-1.el8_10.2 (AXSA:2026-1890:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1890:06 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the...

TencentOS Server 4: ghostscript (TSSA-2026:1047)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1047 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RockyLinux 8 : corosync (RLSA-2026:69277)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69277 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

CVE-2026-75649

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75665

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75649

Adobe Bridge is impacted by a Heap-based Buffer Overflow (CWE-122) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Practical exploitation requires user interaction , specifically when a victim opens a malicious file . Re...

CVE-2026-75649 Bridge | Heap-based Buffer Overflow (CWE-122)

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-84776

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75665

Adobe Bridge is impacted by a Heap-based Buffer Overflow (CWE-122) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a maliciously crafte...

EUVD-2026-84773

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75665 Bridge | Heap-based Buffer Overflow (CWE-122)

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-18457

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.3 before 5.2...

EUVD-2026-84612

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.3 before 5.2...

CVE-2026-18457

A heap-based buffer overflow vulnerability exists in the RTI Connext Professional (Core Libraries) . This flaw allows for overflow buffers and impacts multiple versions, including 7.4.0 before 7.7.0.1 , 7.0.0 before 7.3.1.6 , 6.1.0 before 6.1. , 6.0.0 before 6.0. , 5.3.0 before 5.3. , and 5.2.3 b...

K000162605: BIG-IP APM vulnerability CVE-2026-94127

Security Advisory Description When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments...

OPENSUSE-SU-2026:21908-1 Security update for libX11

This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910...

AZL-103472 CVE-2026-95508 affecting package libslirp 4.9.3-1

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...