CLEANSTART-2024-RJ67281 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files

Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...

CLEANSTART-2024-WW93574 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files

Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...

thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

thrift: thrift: Denial of Service via improper handling of compressed data

A flaw was found in the Apache Thrift C++ bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted, highly compressed data payloads. Because the software does not properly restrict resource allocation during decompression, processing these...

thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

CLEANSTART-2023-PY66778 sprintf in the GNU C Library (glibc) 2

Security vulnerability affects the mpfr4 package. sprintf in the GNU C Library glibc 2...

CLEANSTART-2025-VY76861 flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Do...

Security vulnerability affects the c-ares package. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking...

CLEANSTART-2025-FK62807 c-ares is a C library for asynchronous DNS requests

Security vulnerability affects the c-ares package. c-ares is a C library for asynchronous DNS requests...

CLEANSTART-2026-XP51348 Security fix for ghsa-jq53-42q6-pqr5 applied in: c-ares 1.34.5-r0

Security vulnerability affects the c-ares package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-JX38595 c-ares is an asynchronous resolver library

Security vulnerability affects the c-ares package. c-ares is an asynchronous resolver library...

CLEANSTART-2026-XI18569 c-ares is an asynchronous resolver library

Security vulnerability affects the c-ares package. c-ares is an asynchronous resolver library...

[SECURITY] Fedora 43 Update: librabbitmq-0.18.0-1.fc43

This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1...

SUSE CVE-2026-97589

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request, the doonerequest callback must return 0 to indicate successful...

PT-2026-103995

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82358: Incorrect Authorization

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO Service Data Object server implementation 'src/cosdoserver.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload fo...

AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1772013351)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772013351 advisory. - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for...

AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776176227)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776176227 advisory. - Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C...

Rocky Linux 8.6 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0055)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260055 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-5981, CVE-2024-0553, CVE-2023-0361,...

CentOS Linux 8 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (CENTOS-STREAM8:CLSA-2025:1759335207)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1759335207 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Rocky Linux 8 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (crlsa-2022_2043)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20222043 advisory. c-ares: Missing input validation of host names may lead to domain hijacking CVE-2021-3672 Tenable has extracted the preceding description block directly from the CI...