190360 matches found
Out-of-bounds read when training a dictionary from inconsistent sample sizes
ZDICTtrainFromBuffer is never told the length of the samples buffer. Before 0.4.10, zstd::dict::fromcontinuous initially traindict called it directly: up to 0.2.1 without checking the sample sizes against the buffer at all, and from 0.3.0 with a sum that wraps around when overflow checks are off,...
OESA-2026-4375 jpegxl security update
This package contains a reference implementation of JPEG XL encoder and decoder. Security Fixes: libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet o...
OESA-2026-4350 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the par...
OESA-2026-4351 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the par...
OESA-2026-4349 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the par...
OESA-2026-4348 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the par...
OESA-2026-4327 libXtst security update
X.Org X11 libXtst runtime library Security Fixes: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.CVE-2026-94286...
OESA-2026-4328 libXtst security update
X.Org X11 libXtst runtime library Security Fixes: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.CVE-2026-94286...
OESA-2026-4325 libXtst security update
X.Org X11 libXtst runtime library Security Fixes: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.CVE-2026-94286...
OESA-2026-4326 libXtst security update
X.Org X11 libXtst runtime library Security Fixes: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.CVE-2026-94286...
OESA-2026-4315 alsa-lib security update
The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing...
OESA-2026-4313 alsa-lib security update
The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing...
OESA-2026-4314 alsa-lib security update
The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing...
OESA-2026-4312 alsa-lib security update
The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing...
OESA-2026-4291 libXi security update
libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...
OESA-2026-4290 libXi security update
libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...
OESA-2026-4289 libXi security update
libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...
OESA-2026-4288 libXi security update
libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...
OESA-2026-4285 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4287 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...