Fedora 44 : libgit2 / rust-libgit2-sys (2026-9d59721e9b)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d59721e9b advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

CVE-2026-64467

creationtimestamp| type| source ---|---|--- 2026-07-25 22:04:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116982876866945447 2026-07-26 11:37:35+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116986075905263463...

CVE-2026-64415

creationtimestamp| type| source ---|---|--- 2026-07-25 18:07:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrihhksabg2z 2026-07-25 18:07:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981944887444211...

Updated vorbis-tools package fixes a security vulnerability

The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...

Updated libnfs packages fix a security vulnerability

The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...

CVE-2026-64399

creationtimestamp| type| source ---|---|--- 2026-07-25 17:09:54+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981720297678493 2026-07-25 17:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mriebgo2ti2z 2026-07-27 06:20:07+00:00| seen|...

CVE-2019-6015

creationtimestamp| type| source ---|---|--- 2026-07-25 16:58:07+00:00| seen| https://gist.github.com/kuroma6666/70d2b192280084f50f932d4f0c0dbfc9...

CVE-2026-64433

creationtimestamp| type| source ---|---|--- 2026-07-25 16:55:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116981664371674372 2026-07-26 13:31:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116986525743985426...

HTTP Request Smuggling

io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to the WebSocket V07/V08 handshaker accepting a WebSocket upgrade request without requiring the Connection: Upgrade and Upgrade: websocket headers, which allows an attacker to force an unrecognized protoc...

SUSE CVE-2026-64459

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...

CVE-2024-50337

creationtimestamp| type| source ---|---|--- 2026-07-25 15:00:17+00:00| seen| https://t.me/ZerodayAlert/435 2026-07-26 00:00:41+00:00| seen| https://t.me/ZerodayAlert/435 2026-08-06 04:00:04+00:00| seen| https://t.me/ZerodayAlert/435 2026-08-07 01:19:42+00:00| seen| https://t.me/ZerodayAlert/435...

CVE-2026-56167

creationtimestamp| type| source ---|---|--- 2026-07-25 11:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhpmyb3gk2m 2026-07-31 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvplolmdu22...

DEBIAN-CVE-2026-64517

In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xegscinitposthwconfig explicitly frees a BO allocated with xemanagedbocreatepinmap via xebounpinmapnovm. Since the managed BO already has a devm cleanup...

DEBIAN-CVE-2026-64494

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...

DEBIAN-CVE-2026-64492

In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...

DEBIAN-CVE-2026-64497

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELDGET. The...

DEBIAN-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

DEBIAN-CVE-2026-64460

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriovrestorevfrebarstate uses the VF Resizable BAR Control register to decide how many VF BARs to restore nbars and which VF BAR each iteration addresses baridx. baridx indexes...

DEBIAN-CVE-2026-64447

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit and ipu7psysinit, pdata is allocated and then passed to ipu7businitializedevice, which stores it in adev-pdata. The ipu7busrelease...

DEBIAN-CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...