kernel security, bug fix, and enhancement update

4.18.0-553.170.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

RockyLinux 8 : gawk (RLSA-2026:73511)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73511 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c CVE-2026-404...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

ROS-20261002-73-0075

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261002-73-0049

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261002-73-0074

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Oracle Linux 9 : libvirt (ELSA-2026-74424)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74424 advisory. - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - util: virFileChownFiles: do not...

libvirt security, bug fix, and enhancement update

11.10.0-12.7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.7.el98 - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - qemu: Always assume support for 'QEMUCAPSSETACTION' RHEL-242549 - qemu: Remove unused...

PT-2026-121200

Уязвимость функции clipboard synthesize image format to bmp модуля записи BMP RDP-клиента FreeRDP связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

ROS-20261002-73-0047

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261002-73-0050

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-103629: Integer Overflow or Wraparound

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

ROS-20261002-73-0071

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-103621: Integer Overflow or Wraparound

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

MiracleLinux 8 : gawk-4.2.1-5.el8_10 (AXSA:2026-1956:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1956:01 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c...

CVE-2026-66837: Stack-based Buffer Overflow

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

ROS-20261002-73-0125

The vulnerability in glib2 is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2026-83632: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104326

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift contains an issue involving the allocation of resources without limits or throttling, integer overflow or wraparound, and a heap-based buffer overflow. A heap-based buffer overfl...

kernel security, bug fix, and enhancement update

6.12.0-211.60.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...