ALSA-2026:81532 Important: pcre2 security update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fixes: pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2026-4296)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP...

TencentOS Server 4: pcs (TSSA-2026:1077)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1077 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2 : rpcbind (ALAS-2026-3972)

The version of rpcbind installed on the remote host is prior to 0.2.0-45. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3972 advisory. A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by...

EulerOS 2.0 SP13 : mod_http2 (EulerOS-SA-2026-4163)

According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP requests...

EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-4244)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP13 : containerd (EulerOS-SA-2026-4035)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4350)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

EulerOS 2.0 SP13 : libssh (EulerOS-SA-2026-4064)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...

Amazon Linux 2023 : rpcbind (ALAS2023-2026-3169)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3169 advisory. A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a...

EulerOS 2.0 SP11 : cpio (EulerOS-SA-2026-4219)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-4225)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-4339)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

Amazon Linux 2 : python3-tornado (ALAS-2026-3975)

The version of python3-tornado installed on the remote host is prior to 5.0.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3975 advisory. Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data...

PT-2026-110598

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.22 Description A denial of service issue exists where the NanoNemotronVLImageProcessor disables Pillow decompression bomb protection process-wide by setting Image.MAX IMAGE PIXELS to None. This allows remote...

PT-2026-110697

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.0-20 through 7.1.2-31 Description A use after free issue exists in the -fx option. This occurs when a memory allocation fails during a specific operation. An attacker can provide crafted -fx expressions while the syste...

PT-2026-110959

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A flaw exists in the service processor mailbox interface. An authenticated attacker with service-level access to the Flexible Service Processor FSP can send a speciall...

Important: python-tornado

Issue Overview: Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and...

Important: rpcbind

Issue Overview: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists,...

EulerOS 2.0 SP13 : containerd (EulerOS-SA-2026-4126)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...