181178 matches found
CVE-2026-53792
rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...
CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471...
osbuild-composer security update
176-1.0.1 - Track github upstream...
freerdp security update
2:2.11.7-11 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213173, RHEL-222796, RHEL-222972, RHEL-223606...
dhcpcd security update
10.0.6-11 - Fix CVE-2026-14258...
CVE-2026-53797
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with ...
ROS-20260813-73-0003
The vulnerability in podman is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260813-73-0028
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0048
The vulnerability in uriparser is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Moderate: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...
ROS-20260813-73-0006
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0014
The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260813-73-0018
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0051
The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260813-73-0037
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0030
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...