CVE-2026-91059

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2026-91059 JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2026-91059

The GUIX JPEG software decoder is vulnerable to an out-of-bounds read (CWE-125) because it does not enforce ordering on JPEG markers. A crafted file containing a second SOF0 frame header after an SOS marker causes the decoder to re-run the frame header parser after the output buffer is already al...

EUVD-2026-105042

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler decryption of stored password The script in this repository allows you to decrypt the passwords stored in the SFTP configuration file for a JobScheduler instance. Description SOS JobScheduler is a tool for remote system administration that allows users to call...

[SECURITY] Fedora 43 Update: sos-4.12.0-2.fc43

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers...

CVE-2026-79655 affecting package sos for versions less than 4.6.1-3

CVE-2026-79655 affecting package sos for versions less than 4.6.1-3. A patched version of the package is available...

[SECURITY] Fedora 44 Update: sos-4.12.0-2.fc44

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers...

Fedora 44 : sos (2026-594e78463a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-594e78463a advisory. Security fix for CVE-2026-79655 Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to...

[SECURITY] Fedora 45 Update: sos-4.12.0-2.fc45

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers...

Fedora 45 : sos (2026-cf80902877)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cf80902877 advisory. Security fix for CVE-2026-79655 Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to...

CentOS Linux 7 [TuxCare] Security Update: sos (CENTOS7:CLSA-2026:1779212011)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1779212011 advisory. - It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86,...

Fedora 46 : sos (2026-55bfd55650)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-55bfd55650 advisory. Automatic update for sos-4.12.0-2.fc46. Changelog Tue Sep 29 2026 Sandro Bonazzola - 4.12.0-2 - Fix cleaner to refuse out-of-tree tar members - Patches to fi...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler में संग्रहीत पासवर्ड का डिक्रिप्शन इस रिपॉजिटरी में स्क्रिप्ट आपको JobScheduler इंस्टेंस के लिए SFTP कॉन्फ़िगरेशन फ़ाइल में संग्रहीत पासवर्ड को डिक्रिप्ट करने की अनुमति देती है। विवरण SOS JobScheduler एक रिमोट सिस्टम प्रशासन टूल है जो उपयोगकर्ताओं को वेब इंटरफ़ेस ...

AZL-98211 CVE-2026-79655 affecting package sos 4.6.1-2

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

UBUNTU-CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...