39386 matches found
Security update for glibc
This update for glibc fixes the following issues: CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
CVE-2026-92391
A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...
UBUNTU-CVE-2026-92391
A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...
Curl -- Multiple vulnerabilities
The Curl project reports: local interface connection reuse mixup CVE-2026-107929 info leak uploading over WebSockets with GnuTLS CVE-2026-107928 password leak in CURLINFOEFFECTIVEURL CVE-2026-94266 Authorization: Negotiate sent to foreign origin CVE-2026-94265 server-set cookie aborts cookie jar...
PT-2026-114347
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A deeply nested multipart MIME structure created through the public API causes a stack overflow in libcurl during cleanup. This occurs because the curl mime free function uses excessive recursio...
Linux Distros Unpatched Vulnerability : CVE-2026-101339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191...
Linux Distros Unpatched Vulnerability : CVE-2026-101337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the...
cpio: GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives
A flaw was found in GNU cpio. This vulnerability involves uncontrolled memory allocation when processing specially crafted cpio archives. A remote attacker could exploit this by providing a malicious archive, leading to a stack overflow and causing the cpio process to crash. This results in a...
Security update for glibc
This update for glibc fixes the following issues: CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges bsc1282509. CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution bsc1282449. Patch Instructions: To install this SUSE update...
SUSE-SU-2026:4654-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges bsc1282509. - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution bsc1282449...
SUSE CVE-2026-109264
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service...
SUSE CVE-2026-109267
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a...
Updated libextractor package fixes security vulnerabilities
GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...
MGASA-2026-0484 Updated libextractor package fixes security vulnerabilities
GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the MVG decoder due to uncontrolled recursion. An attacker can cause the process to crash by submitting a specially crafted file name that triggers a stack overflow. Remediation A fix was pushed into the master...
Uncontrolled Recursion
Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...
Uncontrolled Recursion
Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Uncontrolled Recursion
Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Uncontrolled Recursion
Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Uncontrolled Recursion
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...