AlmaLinux 9.6 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791806541)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791806541 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RP...

Amazon Linux 2023 : perl-Storable, perl-Storable-tests (ALAS2023-2026-3203)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3203 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls...

EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-4244)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP13 : expat (EulerOS-SA-2026-4135)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 has an integer overflow in getAttributeId.CVE-2026-56405 Expat through 2.8.3 contains an out-of-bounds read vulnerability tha...

EulerOS 2.0 SP13 : jbig2dec (EulerOS-SA-2026-4054)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

EulerOS 2.0 SP11 : proftpd (EulerOS-SA-2026-4365)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the modsftp module that allows authenticated...

Amazon Linux 2023 : perl-Net-IDN-Encode (ALAS2023-2026-3190)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3190 advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. The XS backend keeps the punycode delta, and the...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2026-4386)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791791753)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791791753 advisory. - libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms whe...

EulerOS 2.0 SP11 : jbig2dec (EulerOS-SA-2026-4238)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4144)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : lcms2 (EulerOS-SA-2026-4242)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

FreeBSD : Gitlab -- vulnerabilities (5518664d-c652-11f1-b273-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5518664d-c652-11f1-b273-2cf05da270f3 advisory. Gitlab reports: Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/...

EulerOS 2.0 SP11 : diffutils (EulerOS-SA-2026-4313)

According to the versions of the diffutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : diff3 tool from GNU diffutils is vulnerable to a heapbased buffer overflow due to multiple signed integer overflows in linemapping calculations...

AlmaLinux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791791753)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791791753 advisory. - libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when...

emacs security update

1:27.2-18.el98.2 - Fix integer overflow in pbmload image validation RHEL-248067 1:27.2-18.el98.1 - Restrict Tramp user name to fix CVE-2026-79992 RHEL-248552...

emacs security update

1:26.1-15.2 - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Resolves: RHEL-248545 1:26.1-15.1 - Fix integer overflow in PBM image loader CVE-2026-77219 - Resolves: RHEL-248064...

CVE-2026-98317

A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...

Linux Distros Unpatched Vulnerability : CVE-2026-107324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON...