PT-2026-97979

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during the parsing of the XI2 XIQueryDevice reply in libXi. This flaw allows a malicious X server to cause a crash of an attached X client. An out-of-bounds read is a...

CVE-2026-94281

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

PT-2026-98141

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6 Description The MobiDoc::ParseHeader function in src/MobiDoc.cpp validates records using kMobiHeaderMinLen, while DecodeMobiDocHeader creates a decoder sized for kMobiHeaderLen without verifying the actual...

CVE-2026-93280: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

PT-2026-105014

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...

PT-2026-105015

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

PT-2026-104912

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru pia advance and fru pia copy field helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

Linux Distros Unpatched Vulnerability : CVE-2026-97408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a two-byte PSM at the start of the payload. l2caprecvframe currently read...

Linux Distros Unpatched Vulnerability : CVE-2026-86243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects...

Linux Distros Unpatched Vulnerability : CVE-2026-93807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsihalloadkey copies txmickey and rxmickey from data16 and data24 whenever key data is present. Thos...

Linux Distros Unpatched Vulnerability : CVE-2026-93808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: caiaq: validate EP1 reply lengths usbep1commandreplydispatch uses buf0 as a command byte and then reads command-specific fixed items from the...

Security update for zstd-jni (important)

openSUSE security update: security update for zstd-jni ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21902-1 Rating: important References: bsc1279953 bsc1279954 bsc1279955 bsc1279956 Cross-References: CVE-2026-87823 CVE-2026-87824 CVE-2026-87825...

Linux Distros Unpatched Vulnerability : CVE-2026-93787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: bound dirent name against end of SMB response in cifsfilldir cifsfilldir copies the entry name out of an SMB1 TRANS2FINDFIRST / FINDNEXT response...

Linux Distros Unpatched Vulnerability : CVE-2026-93805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211rxmlmemgmt and cfg80211txmlmemgmt call tracepoints before rejecting frames...

Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-123926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123926 advisory. A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocate...

Linux Distros Unpatched Vulnerability : CVE-2026-93783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: validate skb length in rfcommrecvframe rfcommrecvframe casts skb-data to struct rfcommhdr and dereferences hdr-addr and hdr-ctrl without...

Linux Distros Unpatched Vulnerability : CVE-2026-93543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93543 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-96546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in...

Linux Distros Unpatched Vulnerability : CVE-2026-93545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93545 Note...

Security update for libsoup (moderate)

openSUSE security update: security update for libsoup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21871-1 Rating: moderate References: bsc1271401 Cross-References: CVE-2026-12478 CVSS scores: CVE-2026-12478 SUSE : 4.8...