CVE-2026-116260 alta libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive 27 oct 2026 build de las 07:13 UTC 26 oct 2026 CVE-2026-104849 alta tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options 27 oct 2026 build de las 07:13 UTC 2 oct 2026 CVE-2024-8928 alta Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8928: php: Erroneous p 27 oct 2026 build de las 07:13 UTC CVE-2026-116124 alta libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser 27 oct 2026 build de las 01:25 UTC 26 oct 2026 CVE-2026-105483 alta nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames 27 oct 2026 build de las 01:25 UTC 23 oct 2026 CVE-2026-55888 alta xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames 27 oct 2026 build de las 01:25 UTC 23 oct 2026 CVE-2026-110354 alta haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request 27 oct 2026 build de las 01:25 UTC 22 oct 2026 CVE-2026-110353 alta haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame 27 oct 2026 build de las 01:25 UTC 22 oct 2026 CVE-2026-98869 alta kernel: bpf: Infer zext_dst based on static register liveness analysis 27 oct 2026 build de las 01:25 UTC 21 oct 2026 CVE-2023-7356 alta kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID 27 oct 2026 build de las 01:25 UTC 21 oct 2026 CVE-2026-111943 alta crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates 27 oct 2026 build de las 01:25 UTC 21 oct 2026 CVE-2026-113812 alta perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates 27 oct 2026 build de las 01:25 UTC 20 oct 2026 CVE-2025-71436 alta raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling 27 oct 2026 build de las 01:25 UTC 20 oct 2026 CVE-2026-112396 alta pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding 27 oct 2026 build de las 01:25 UTC 19 oct 2026 CVE-2026-112258 alta gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels 27 oct 2026 build de las 01:25 UTC 19 oct 2026 CVE-2026-112395 alta pillow: pillow: Information disclosure via crafted tiled TIFF image 27 oct 2026 build de las 01:25 UTC 19 oct 2026 CVE-2026-112394 alta pillow: pillow: Information disclosure via out-of-bounds read in raw decoders 27 oct 2026 build de las 01:25 UTC 19 oct 2026 CVE-2026-98857 alta kernel: ipvs: bound LBLCR and LBLC cache growth 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98853 alta kernel: net: gso: limit recursive IP-in-IP segmentation 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98769 alta kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98725 alta kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98718 alta kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98715 alta kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98639 alta kernel: KVM: riscv: Fix NACL hfence entry update order 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98621 alta kernel: net: gue: reject invalid REMCSUM offsets 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98614 alta kernel: sctp: avoid livelock while updating retransmit path 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98466 alta kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-110752 alta perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-92262 alta mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-85746 alta mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-104715 alta cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-98417 alta kernel: net: xfrm: reject unrepresentable espintcp transport headers 27 oct 2026 build de las 01:25 UTC 14 oct 2026 CVE-2026-86476 alta gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize 27 oct 2026 build de las 01:25 UTC 14 oct 2026 CVE-2026-106062 alta gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file 27 oct 2026 build de las 01:25 UTC 6 oct 2026 CVE-2019-25777 alta perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment 27 oct 2026 build de las 01:25 UTC 5 oct 2026 CVE-2017-20285 alta perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document 27 oct 2026 build de las 01:25 UTC 5 oct 2026 CVE-2026-103226 alta ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 27 oct 2026 build de las 01:25 UTC 30 sept 2026 CVE-2026-109411 alta samba: Access control bypass via vfs_ceph_rgw case-insensitive open 27 oct 2026 build de las 01:25 UTC GHSA-qpg5-fx6p-8cq3 alta Using port forwarding silently enables server access to the local SSH agent 27 oct 2026 build de las 01:25 UTC GHSA-vxj5-fg65-x765 alta net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295) 27 oct 2026 build de las 01:25 UTC CVE-2026-116191 alta github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service 26 oct 2026 build de las 19:14 UTC 25 oct 2026 CVE-2026-116189 alta github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass 26 oct 2026 build de las 19:14 UTC 25 oct 2026 CVE-2026-68476 alta kernel: ipvs: reload ip header after head reallocation 26 oct 2026 build de las 19:14 UTC 15 ago 2026 CVE-2026-14803 alta Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder 26 oct 2026 build de las 19:14 UTC 6 jul 2026 GHSA-h7x6-9mqf-vgmx alta Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning) 26 oct 2026 build de las 19:14 UTC GHSA-vxc9-rm8f-p56j alta Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params 26 oct 2026 build de las 19:14 UTC openSUSE-SU-2026:12261-1 alta git-bug-0.11.0-3.1 on GA media 26 oct 2026 build de las 19:14 UTC openSUSE-SU-2026:12262-1 alta istioctl-1.31.3-1.1 on GA media 26 oct 2026 build de las 19:14 UTC openSUSE-SU-2026:12264-1 alta okteto-3.24.1-1.1 on GA media 26 oct 2026 build de las 19:14 UTC openSUSE-SU-2026:22158-1 alta Security update for docker 26 oct 2026 build de las 19:14 UTC 