13863 matches found
CVE-2026-43036 net: use skb_header_pointer() for TCPv4 GSO frag_off check
In the Linux kernel, the following vulnerability has been resolved: net: use skbheaderpointer for TCPv4 GSO fragoff check Syzbot reported a KMSAN uninit-value warning in gsofeaturescheck called from netifskbfeatures 1. gsofeaturescheck reads iph-fragoff to decide whether to clear mangleidfeatures...
CVE-2026-43033 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When decrypting data that is not in-place src != dst, there is no need to save the high-order sequence bits in dst as it could simply be re-copied...
EUVD-2026-26511
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fscompresswriteendio In f2fscompresswriteendio, decpagecountsbi, type can bring the F2FSWBCPDATA counter to zero, unblocking f2fswaitonallpages in f2fsputsuper on a concurrent unmount CPU. The...
CLSA-2026-1777546646 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: jpeg loader rejects unsupported component counts in the non-incremental code path...
Important Photon OS Security Update - PHSA-2026-5.0-0838
Updates of 'curl' packages of Photon OS have been released...
Oracle Linux 8 : xorg-x11-server (ELSA-2026-11692)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-11692 advisory. 1.20.11-28 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves:...
CVE-2026-30893 Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchronization extraction routine allows an authenticated cluster peer to write arbitrary files outside the...
CLSA-2026-1777482027 sssd: Fix of 2 CVEs
CVE-2018-10852: create the sudo responder socket with stricter permissions - CVE-2019-3811: do not return "/" as the home directory when the user has no homedir configured...
CLSA-2026-1777481470 glibc: Fix of CVE-2021-3326
CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module...
ROOT-OS-DEBIAN-12-CVE-2025-11468 CVE-2025-11468 in rootio-python3.11 - Patched by Root
Root has patched CVE-2025-11468 in the rootio-python3.11 package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1777456424 gcc: Fix of CVE-2021-42574
CVE-2021-42574: add -Wbidi-chars warning for Unicode bidirectional text...
ROOT-OS-DEBIAN-12-CVE-2026-33900 CVE-2026-33900 in rootio-imagemagick - Patched by Root
Root has patched CVE-2026-33900 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1777445847 grafana-pcp: Fix of CVE-2026-25679
Rebuild against recent Go compiler - CVE-2026-25679: fix net/url insufficient validation of host in url.Parse...
CLEANSTART-2026-BU99819 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4
Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...
TencentOS Server 3: python3 (TSSA-2026:0258)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0258 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PackageKit security update
1.1.12-8.0.1 - removed rhel-Vendor.conf.patch 1.1.12-8 - Backport fix for CVE-2026-41651. - Resolves: RHEL-170493...
xorg-x11-server security update
1.20.11-28 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163216 Resolves: https://redhat.atlassian.net/browse/RHEL-163298 Resolves: https://redhat.atlassian.net/browse/RHEL-163229...
Oracle Linux 10 : pcs (ELSA-2026-10713)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-10713 advisory. 0.12.1-1.el101.3 - Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.23.2 Resolves: RHEL-164062 Tenable has extracted the preceding...
Security update for python-requests
This update for python-requests fixes the following issues: CVE-2026-25645: extractzippedpaths uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation bsc1260589. Patch Instructions: To install this SUSE update use the SUSE...