libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

RHEL 9 : libreswan (RHSA-2026:61779)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61779 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

UBUNTU-CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

CVE-2026-80633 iommufd: Take dma_resv lock before dma_buf_unpin() in release path

In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the caller to hold the exporter's dmaresv lock: void dmabufunpinstruct dmabufattachment attach ... dmaresvasserthelddmabuf-resv;...

CVE-2026-80606 drm/xe/userptr: Hold notifier_lock for write on inject test path

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

CVE-2026-80606: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

openSUSE 16: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (openSUSE-SU-2026:21644-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21644-1 advisory. Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap...

EUVD-2026-67104

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098805 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT when the fs flips RO inside btrfsrepairiofailure BUG There is a bug report...

CVE-2026-54920

A flaw was found in OpenEXR. A remote attacker could exploit a reachable assertion failure in the HTJ2K decode path by providing a specially crafted HTJ2K-compressed EXR file. This file, containing a QCD marker with specific invalid bits, causes an unconditional process abort in applications that...

CVE-2026-53532

A flaw was found in OpenEXR. A remote attacker can provide a specially crafted HTJ2K-compressed EXR file, which causes an unconditional process abort in applications that process untrusted input. This denial of service occurs because OpenEXR passes a malformed QCD marker to the vendored OpenJPH...

SUSE-SU-2026:23320-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...

CVE-2026-54920

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

DEBIAN-CVE-2026-54920

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

AZL-97620 CVE-2026-54920 affecting package OpenEXR 2.3.0-6

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

UBUNTU-CVE-2026-54920

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...