SUSE CVE-2026-12528

A flaw was found in 389 Directory Server in the aclpnormalizeacltxt function of aclparse.c. A malformed ACI Access Control Instruction string can trigger heap-buffer-overflow writes and reads during ACI parsing. The function fails to validate that the ACI keyword has sufficient length after...

Linux Distros Unpatched Vulnerability : CVE-2026-12528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389 Directory Server in the aclpnormalizeacltxt function of aclparse.c. A malformed ACI Access Control Instruction string can trigger...

CVE-2026-5745

Libarchive exposes a NULL pointer dereference in the ACL parser (archive_acl_from_text_nl) when processing malformed ACL strings, leading to DoS via a crash in applications using the libarchive API (e.g., bsdtar). Affected component: the ACL parsing logic in libarchive. Underlying cause: insuffic...