apr-util security update

1.6.1-9.1 - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 - Resolves: RHEL-236267 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 - Resolves...

CVE-2026-96257: Stack-based Buffer Overflow

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

CVE-2026-96676: Stack-based Buffer Overflow

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

PT-2026-97291

Name of the Vulnerable Software and Affected Versions Qt affected versions not specified Description Uncontrolled recursion in the readElementText function of QXmlStreamReader allows attackers to cause a denial of service. This occurs when the application processes a crafted XML document, leading...

RHEL 9 : postgresql:15 (RHSA-2026:70762)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70762 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

UBUNTU-CVE-2026-93403

Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin...

PT-2026-97119

Name of the Vulnerable Software and Affected Versions Dask versions prior to 2026.8.1 Description A remote deserialization issue exists within the Loader component. The flaw is located in the from npy stack function of the dask/array/core.py file, where improper handling of input can lead to the...

PT-2026-97151

Name of the Vulnerable Software and Affected Versions Fast FAC1203R Gigabit Edition version 2.0.4 Description A stack-based buffer overflow exists in the Device Discovery Service component. This issue occurs within the copy msg element function and can be triggered remotely through manipulation...

Linux Distros Unpatched Vulnerability : CVE-2026-63275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was...

RockyLinux 9 : postgresql (RLSA-2026:69607)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69607 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

RHEL 10 : libxml2 (RHSA-2026:70596)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70596 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow ...

Linux Distros Unpatched Vulnerability : CVE-2026-87121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device. CVE-2026-87121 - The...

RHEL 9 : postgresql:16 (RHSA-2026:70856)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70856 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

Linux Distros Unpatched Vulnerability : CVE-2026-78253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-95818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the...

RHEL 9 : libxml2 (RHSA-2026:70639)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70639 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

AlmaLinux 9 : postgresql (ALSA-2026:69607)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69607 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...

Linux Distros Unpatched Vulnerability : CVE-2026-63276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A...

AlmaLinux 10 : postgresql16 (ALSA-2026:70186)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70186 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-93403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin CVE-2026-93403 Note that Nessus relies on the presence o...