58114 matches found
RLSA-2026:37129 Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: GStreamer: Heap buffer overflo...
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow bsc1268449. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:2844-1 Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow bsc1268449...
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow bsc1268449. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:22620-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. - CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...
CVE-2026-38076
A flaw was found in jbig2dec. An integer overflow vulnerability in the jbig2arithiaidctxnew function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal...
EUVD-2026-42767
An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input...
Ubuntu 26.04 LTS : libheif vulnerabilities (USN-8526-1)
The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8526-1 advisory. Xianrui Dong discovered that libheif had an out-of-bounds read in its HEIF sequence track parser. An attacker could possibly use this issue to cause a...
EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2603)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
The vulnerability of OSPF traffic analyzer and TLV segment routing analysis in the software for network routing on Unix-like systems allows attackers to cause service interruptions.
The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...
EulerOS 2.0 SP12 : lcms2 (EulerOS-SA-2026-2597)
According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
AlmaLinux 9 : gstreamer1-plugins-bad-free (ALSA-2026:36834)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36834 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...
GStreamer < 1.28.4 Multiple Vulnerabilities
The version of GStreamer installed on the remote host is prior to 1.28.4. It is, therefore, affected by multiple vulnerabilities: - Multiple vulnerabilities were found in the RealMedia demuxer rmdemux and RealAudio demuxer rademux elements in gst-plugins-ugly. The demuxers lacked proper bounds...
EulerOS 2.0 SP12 : openjpeg2 (EulerOS-SA-2026-2609)
According to the versions of the openjpeg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...
EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-2626)
According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checke...
RockyLinux 9 : gstreamer1-plugins-bad-free (RLSA-2026:36834)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36834 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...
EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2543)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
RockyLinux 8 : gstreamer1-plugins-bad-free (RLSA-2026:37130)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:37130 advisory. gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb CVE-2026-52720 gstreamer1-plugins-bad-free:...
PT-2026-57293
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description FreeRDP clients on 32-bit builds contain an integer overflow in the update read delta points function within libfreerdp/core/orders.c. This occurs when multiplying an attacker-controlled point count...
