Rocky Linux 8 [CIQ] Security Update: fetchmail / fetchmail-debuginfo / fetchmail-debugsource (crlsa-2026_86982)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686982 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: fetchmail / fetchmail-debuginfo / fetchmail-debugsource (crlsa-2026_85959)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685959 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description blo...

SUSE CVE-2026-92822

A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content...

CLSA-2026-1790850483 buildah: Fix of 7 CVEs

Rebuild el96 against golang = 1.25.7-1.el96.tuxcare.els16 to pick up the Go standard library fixes for: - CVE-2026-33818: enforce a recursion limit in encoding/asn1 Unmarshal to prevent stack exhaustion on deeply nested input - CVE-2026-56853: apply ReadHeaderTimeout while sniffing the...

CVE-2026-114383

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-114382

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-114383

A stack-based buffer overflow exists in the TOTOLINK EX200 (version 5.2.3c.7200) within the wireless.so component. The vulnerability is located in the setWiFiAclAddConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the macAddress argument can trigger the overflow. This flaw allo...

CVE-2026-114383 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-114382

The TOTOLINK EX200 running firmware version 5.2.3c.7200 is vulnerable to a stack-based buffer overflow in the lan.so component. The flaw exists within the setStaticDhcpConfig function of the /cgi-bin/cstecgi.cgi file, specifically when the Comment argument is manipulated. This vulnerability allow...

CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CLSA-2026-1792562667 gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...

Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

============================================================================ Image.quantize with empty palette leaks uninitialized stack memory Location: src/libImaging/Palette.c:216 in ImagingPaletteCacheUpdate Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-104660

Pillow: Image.quantize with empty palette leaks uninitialized stack memory...

GHSA-RFGQ-Q3W2-PMV2 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

============================================================================ Image.quantize with empty palette leaks uninitialized stack memory Location: src/libImaging/Palette.c:216 in ImagingPaletteCacheUpdate Commit: a707c6b21c313880d0771e54965d142dd42358b6...

CLSA-2026-1792536927 libevent: Fix of 5 CVEs

CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...

php: php: Denial of Service via unbounded recursion in SOAP parser

A flaw was found in PHP. An unauthenticated remote attacker could cause a Denial of Service DoS by sending a specially crafted request to an affected Simple Object Access Protocol SOAP server endpoint. Due to a lack of recursion depth limits when parsing deeply nested XML elements, processing suc...

php: php: Denial of Service via unbounded recursion in SOAP parser

A flaw was found in PHP. An unauthenticated remote attacker could cause a Denial of Service DoS by sending a specially crafted request to an affected Simple Object Access Protocol SOAP server endpoint. Due to a lack of recursion depth limits when parsing deeply nested XML elements, processing suc...

CVE-2026-98641

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem on ARM64 architectures. When processing BPF exception callbacks, the compiler fails to properly set up the stack frame pointer register. A local user can exploit this vulnerability by running a crafted BPF program that...

CVE-2026-92183

A flaw was found in GIMP. This flaw allows an attacker to achieve arbitrary code execution by tricking a user into opening a specially crafted Animated Portable Network Graphics APNG image. The vulnerability is caused by a stack-based buffer overflow resulting from improper validation of data...