Search: “gnu”

2 stories in the last 7d

Canadian Cyber Centre advisory AV26-923 flags a stack overflow in GNU libextractor before v1.15 via OLE2 files.

The Canadian Centre for Cyber Security issued advisory AV26-923 on September 15, 2026, covering CVE-2026-91752, a stack overflow vulnerability in GNU libextractor versions prior to 1.15 triggered via OLE2 file parsing. The Cyber Centre encourages users and administrators to review the provided links and apply necessary updates as they become available.

Canadian Centre for Cyber Securityupdated Sep 16, 23:13 UTC · 7h agofirst Sep 15, 15:10 UTC · 1d agoAdvisory 2 sources CVE-2026-91752

USN-8737-2: GNU C Library vulnerabilities

Ubuntu extends glibc fixes to 24.04 LTS, patching buffer overflow in strfmon and out-of-bounds access in tdelete, both potentially leading to code execution.

USN-8737-2 provides the Ubuntu 24.04 LTS counterpart to fixes released in USN-8737-1 for GNU C Library vulnerabilities. CVE-2026-19499 is a buffer overflow in strfmon when handling right-justification padding, potentially allowing denial of service or arbitrary code execution on Ubuntu 26.04 LTS. CVE-2026-19542 is an out-of-bounds stack array access in tdelete that could also result in denial of service or code execution.

Ubuntu Security Noticesupdated Sep 16, 20:12 UTC · 10h agofirst Sep 10, 11:25 UTC · 6d agoAdvisory 15 sources CVE-2026-19499 CVE-2026-195421

Search: “gnu”

GNU security advisory (AV26-923)

USN-8737-2: GNU C Library vulnerabilities