Important: nodejs24

Issue Overview: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per bra...

Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2026_88164)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688164 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

Fedora 44 : php-pecl-mongodb2 (2026-4a5aaed9f5)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4a5aaed9f5 advisory. Version 2.1.12 Release Highlights - PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON - PHPC-276: Enforce the decode nesting limit...

Important: nodejs22

Issue Overview: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per bra...

Fedora 43 : php-pecl-mongodb2 (2026-1ed9f02b1e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ed9f02b1e advisory. Version 2.1.12 Release Highlights - PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON - PHPC-276: Enforce the decode nesting limit...

Amazon Linux 2 : gfs2-utils (ALAS-2026-4004)

The version of gfs2-utils installed on the remote host is prior to 3.1.10-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4004 advisory. A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with a...

SUSE CVE-2026-99031

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup brmulticastsgdelexcludeports removes automatically added STAREXCL port groups by calling brmulticastdelpg. For S,G entries, that deletion calls back into...

CLSA-2026-1791463004 ghostscript: Fix of 3 CVEs

CVE-2026-39919: heap buffer overflow in the JPEG 2000 output adapter with subsampled components base/sjpxopenjpeg.c - CVE-2026-103226: stack buffer overflow in the pdfwrite Type 1 to Type 2 font converter control stack devices/vector/gdevpsfx.c...

CVE-2026-89864

A flaw was found in the qla2xxx SCSI driver in the Linux kernel. This vulnerability allows a local attacker, with CAPSYSRAWIO capabilities, to cause heap and kernel stack corruption due to unbounded length fields in I2C bsg handlers. Successful exploitation could lead to privilege escalation or...

CLSA-2026-1792795786 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229

SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo - debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the internal ID type in include/ruby/onigmo.h, regcomp.c, regerror.c. - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in...

CLSA-2026-1792795609 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229

SECURITY UPDATE: out-of-bounds repeat stack access in regexps - debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the ID type in regcomp.c - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in compiled regexps -...

Improper Check for Certificate Revocation

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Check for Certificate Revocation via the Node.js TLS stack in the main and utility processes, whic...

Improper Check for Certificate Revocation

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Check for Certificate Revocation via the Node.js TLS stack in the main and utility processes, which lacked an...

CVE-2026-79982

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bthcitxsyncin allocated that buffer from bthcieppool, a fixed pool whose slots are only...

CVE-2026-79982

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bthcitxsyncin allocated that buffer from bthcieppool, a fixed pool whose slots are only...

CVE-2026-79982

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bthcitxsyncin allocated that buffer from bthcieppool, a fixed pool whose slots are only...

CVE-2026-79982 Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bthcitxsyncin allocated that buffer from bthcieppool, a fixed pool whose slots are only...

CVE-2026-106069

A flaw was found in the Node.js TLS stack. When a non-canonical numeric hostname is used, hostname normalization for certificate verification can disagree with how the platform resolves the address used for the connection. This can cause checkServerIdentity to accept a certificate that does not...

CVE-2026-105483

A flaw was found in the Node.js TLS stack. Improper normalization of hostnames that use fullwidth Unicode digits to represent an IPv4 address can cause certificate hostname verification to accept a certificate that does not identify the intended peer. This may allow an attacker who can influence...

DEBIAN-CVE-2026-115863

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in getdomains in gdhcp/client.c. It copies a fixed NSMAXDNAME 1025 bytes from a DHCPv6 DOMAINLIST option 24 value into a 1026-byte stack buffer dnsname regardless of the actual option length, then walks...