198215 matches found
CVE-2026-102422
shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...
CVE-2026-97029
Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...
CVE-2026-46675
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...
[SECURITY] [DLA 4801-1] swift security update
Debian LTS Advisory DLA-4801-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara September 29, 2026 https://wiki.debian.org/LTS Package : swift Version : 2.30.1-0+deb12u3 CVE ID : CVE-2026-71191 CVE-2026-97149 Debian Bug : 1142972 1148834 Two...
[SECURITY] Fedora 44 Update: perl-Dancer2-2.2.1-1.fc44
Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...
[SECURITY] Fedora 44 Update: perl-Catalyst-Plugin-Static-Simple-0.38-2.fc44
The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...
[SECURITY] Fedora 44 Update: perl-HTML-FormFu-2.07-23.fc44
HTML::FormFu is a HTML form framework which aims to be as easy as possible to use for basic web forms, but with the power and flexibility to do anything else you might want to do as long as it involves forms...
[SECURITY] Fedora 44 Update: NetworkManager-iodine-1.2.0-29.fc44
This package contains software for integrating VPN capabilities with the iodine server and NetworkManager...
[SECURITY] Fedora 44 Update: python-streamlink-8.4.0-2.fc44
Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...
CVE-2026-101281
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...
[SECURITY] Fedora 43 Update: NetworkManager-l2tp-1.52.6-1.fc43
This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager...
[SECURITY] Fedora 43 Update: freeipa-4.13.4-2.fc43
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
CLEANSTART-2026-YL84506 On Unix systems, opening a file in an os
Security vulnerability affects the argo-workflows package. On Unix systems, opening a file in an os...
CVE-2026-101280
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...
[SECURITY] Fedora 45 Update: freerdp-3.32.0-1.fc45
The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...
[SECURITY] Fedora 45 Update: python-quart-trio-0.13.0-1.fc45
Quart-Trio is an extension for Quart to support the Trio event loop. This is an alternative to using the asyncio event loop present in the Python standard library and supported by default in Quart...
CVE-2026-101279
A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...
CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
