2907 matches found
CVE-2026-78367
A macro injection vulnerability in RPM's rpmbuild tarball processing mode allows a remote attacker to achieve arbitrary code execution . The root cause is in the getTarSpec() function (tools/rpmbuild.cc), which passes an attacker-controlled tar member name to rpmExpand() within a %{basename:...} ...
CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...
CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...
CVE-2026-78367
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: Codecs: va-macro: Fix for accessing an array out of bounds for an enum type. Accessing enums using integers would result in accessing an array out of bounds on platforms like aarch64, where sizeoflong is 8 compared to the...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fixed an issue where access to the compander was allowed. The AUX interpolator does not have a compander; therefore, check this before accessing compander data. Without this check, an out-of-bounds access...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fixed an issue where accessing an array was done outside the bounds of the array for an enum type. Accessing enums using integers would result in accessing an array outside its bounds on platforms like...
Linux Distros Unpatched Vulnerability : CVE-2026-78367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an...
PT-2026-80891
Name of the Vulnerable Software and Affected Versions RPM affected versions not specified Description An issue exists in the tarball processing of rpmbuild. When operating in tarball mode such as -ts, -ta, or -tb, the getTarSpec function in tools/rpmbuild.cc passes a member name from a crafted...
SUSE CVE-2026-68280
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSALDEVPMOPS The deprecated UNIVERSALDEVPMOPS macro uses the provided callbacks for both runtime PM and system sleep. This causes the DSI clocks to be disabled twice: once during...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102022)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102022 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its...
CVE-2026-70654
libvips (image processing library) versions prior to 8.18.3 contain a heap buffer overflow in vips_source_read_to_memory (libvips/iofuncs/source.c). The function incorrectly uses VIPS_MAX instead of VIPS_MIN when selecting the remaining read size. Applications that define custom libvips sources a...
RUSTSEC-2026-0264 `proc-macro-en` was removed from crates.io due to malicious code
We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...
`proc-macro-en` was removed from crates.io due to malicious code
We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...
Malicious code in proc_macro_en (crates.io)
proc-macro-en is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carryin...
CVE-2026-76388 Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security
In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...
Linux Distros Unpatched Vulnerability : CVE-2026-23931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of...
CVE-2026-23931
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality...