173 matches found
UBUNTU-CVE-2026-43028
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: ensure names are nul-terminated Reject names that lack a \0 character before feeding them to functions that expect c-strings. Fixes tag is the most recent commit that needs this change...
CLSA-2026-1777540469 taglib: Fix of CVE-2023-47466
CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file...
CLSA-2026-1777538840 mysql: Fix of CVE-2018-2755
CVE-2018-2755: harden binlog event decoding against corrupt binary log files BUG24365972...
CLSA-2026-1777301041 gd: Fix of CVE-2021-38115
Fix CVE-2021-38115: out-of-bounds read in readheadertga...
UBUNTU-CVE-2026-31648
In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nrpages calculation overflow in filemapmappages When running stress-ng on my Arm64 machine with v7.0-rc3 kernel, I encountered some very strange crash issues showing up as "Bad page state": " 734.496287 BUG: Bad...
CLSA-2026-1776069305 binutils: Fix of 2 CVEs
CVE-2026-3441, CVE-2026-3442: fix out-of-bounds read in XCOFF relocation processing...
CLSA-2026-1775647149 libarchive: Fix of CVE-2024-20696
CVE-2024-20696: fix heap buffer overflow via negative copy length in RAR4 reader...
CLSA-2026-1775654402 python3.9: Fix of CVE-2026-4519
CVE-2026-4519: fix webbrowser.open leading dash injection...
RUSTSEC-2026-0124 Potential Panic on Overlong Ciphertext Buffer
An application that passes in a ciphertext buffer of length greater than ptxt.len + TAGLEN to libcruxchacha20poly1305::encrypt or libcruxchacha20poly1305::xchacha20poly1305::encrypt would experience a panic. Impact An application where the length of the ciphertext buffer is under attacker control...
CLSA-2026-1774614065 python3: Fix of CVE-2025-15366
CVE-2025-15366: reject control characters in IMAP commands...
CLSA-2026-1774520206 python3: Fix of CVE-2025-15367
CVE-2025-15367: reject control characters in POP3 commands to prevent command injection...
SUSE-SU-2026:20829-1 Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: afunix: Initialise sccindex in unixaddedge bsc1255052. - CVE-2025-40258: mptcp: fix race condition in mptcpschedulework bsc1255053. -...
CLSA-2026-1773505272 python3.11: Fix of CVE-2025-6075
CVE-2025-6075: fix quadratic complexity in os.path.expandvars...
CVE-2026-30984 iccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence causing an application crash. This vulnerability is fixed in 2.3.1.5...
CLSA-2026-1773136115 python3.9: Fix of CVE-2025-13837
CVE-2025-13837: fix a potential denial of service in plistlib GH-119343...
SUSE SLED15 / SLES15 Security Update : smc-tools (SUSE-SU-2026:0765-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0765-1 advisory. Update to version 1.8.7 jscPED-14601. Security issues fixed: - VUL-1: smc-tools: predictable /tmp file allows for local...
EUVD-2026-8754
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been...
CLSA-2026-1771004260 openssl: Fix of CVE-2025-69421
CVE-2025-69421: fix NULL dereference in PKCS12itemdecryptd2iex...