314 matches found
CVE-2026-103414
The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gxpageheaderdatasize is never validated against the glyph data a page actually contains, the two passes can read different page...
CVE-2026-103414
The GUIX binary resource (theme) loader is vulnerable to an out-of-bounds write (CWE-787) due to independent cursor arithmetic used in two separate passes while traversing resource files. Because gx_page_header_data_size is not validated against actual glyph data, the loader may derive inconsiste...
EUVD-2026-101497
The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gxpageheaderdatasize is never validated against the glyph data a page actually contains, the two passes can read different page...
CVE-2026-103414
The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gxpageheaderdatasize is never validated against the glyph data a page actually contains, the two passes can read different page...
CVE-2026-103414
The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gxpageheaderdatasize is never validated against the glyph data a page actually contains, the two passes can read different page...
Ubuntu 22.04 LTS / 24.04 LTS : GNU Guix vulnerability (USN-8773-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8773-1 advisory. It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local...
USN-8773-1 guix vulnerability
It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges...
USN-8773-1: GNU Guix vulnerability
It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges...
[SECURITY] [DLA 4471-1] debian-security-support update
Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón February 06, 2026 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2026.02.06 Debian Bug : 1117607 1119290 1124248 debian-security-support, the Debian...
Debian dla-4471 : debian-security-support - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4471 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/...
CVE-2019-18192
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365...
EUVD-2017-1582
Malware in sbrugna...
EUVD-2019-7995
Malware in sbrugna...
EUVD-2021-14589
Malware in sbrugna...
EUVD-2022-44296
Malicious code in bioql PyPI...
EUVD-2022-37637
Malicious code in bioql PyPI...
EUVD-2022-37635
Malicious code in bioql PyPI...
EUVD-2025-29155
Malicious code in bioql PyPI...