RockyLinux 9 : gstreamer1-plugins-base (RLSA-2026:69100)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

ALSA-2026:70391 Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

ROS-20260922-73-0020

The vulnerability in gstreamer1-plugins-bad-free is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260922-73-0004

The vulnerability in gstreamer1-plugins-good is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260922-73-0012

The vulnerability in gstreamer1-plugins-bad-free is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260922-73-0010

The vulnerability in gstreamer1-plugins-good is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0008

The vulnerability in gstreamer1-plugins-bad-free is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0018

The vulnerability in gstreamer1-plugins-bad-free is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0030

The vulnerability in gstreamer1-plugins-good is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0003

The vulnerability in gstreamer1-plugins-good is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 7 : gstreamer1-plugins-base (RHSA-2026:69866)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69866 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

Oracle Linux 9 : gstreamer1-plugins-base (ELSA-2026-69100)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69100 advisory. - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves:...

ROS-20260922-73-0022

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0017

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0002

The vulnerability in gstreamer1-plugins-base is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

CVE-2026-65980 Chartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable Substitution

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chartbrew's ClickHouse protocol in server/sources/plugins/clickhouse/clickhouse.protocol.js calls applySqlVariables from...

USN-8798-1: GStreamer Good Plugins vulnerabilities

It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-18295, CVE-2026-18296 It was discovered that GStreamer Good Plugins incorrectly parsed certain PNG files. A remote attacker could...

USN-8798-1 gst-plugins-good1.0 vulnerabilities

It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-18295, CVE-2026-18296 It was discovered that GStreamer Good Plugins incorrectly parsed certain PNG files. A remote attacker could...

USN-8797-1: GStreamer Base Plugins vulnerability

It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file...