RHLW-2026-0F944E70846E7603 Lightwell Security Advisory: protobuf-kotlin 3.21.7.rhlw-00002

Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin 3.21.7 from Maven Central...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

inchi:molfile_fuzzer: Stack-use-after-return in move_explicit_Hcation

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4713332356218880 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: molfilefuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by a vulnerability

Summary The apnotify utility was used by IBM Sterling Connect:Direct for UNIX in asset protection and may be seen in some IBM Connect:Direct for UNIX installation locations that have been upgraded in place since 2017 or earlier. IBM Sterling Connect:Direct for UNIX is impacted by a vulnerability ...

CLSA-2026-1791831421 Fix CVE(s): CVE-2026-80186, CVE-2026-85218

SECURITY UPDATE: stack buffer overflow parsing a remote EIR name - debian/patches/CVE-2026-80186.patch: clamp the name length to HCIMAXNAMELENGTH in name2utf8 in src/eir.c before copying it into the fixed-size stack buffer. - CVE-2026-80186 SECURITY UPDATE: stack buffer overflow in AVRCP...

CLSA-2026-1791831177 exim: Fix of CVE-2026-94056

CVE-2026-94056: read the full Proxy Protocol v2 header before using its length field, avoiding use of uninitialised stack data...

MGASA-2026-0484 Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

MGASA-2026-0485 Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

CVE-2026-109267

A flaw was found in ImageMagick. An attacker could cause a Denial of Service DoS by supplying specially crafted Magick Scripting Language MSL files. An incorrect depth check in the MSL decoder fails to limit recursion during processing, leading to stack exhaustion and causing the application to...

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Uncontrolled Recursion

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Uncontrolled Recursion

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...