UBUNTU-CVE-2026-68137

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25killbyneigh x25killbyneigh walks the global X.25 socket list looking for sockets attached to a terminating neighbour. x25listlock protects list membership while the lookup is in progress, but it...

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

UBUNTU-CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-18370

The CVE-2026-18370 entry details a heap-based buffer overflow in the entr utility, triggered in run_utility(). The code allocates a heap buffer via malloc(ARG_MAX) and copies command-line arguments into it, advancing the destination using the return value of strlcpy() (which reports the source le...

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

EUVD-2026-55623

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

SUSE-SU-2026:3541-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...

Security update for libssh2_org

This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...

CVE-2026-58042

A denial of service DoS vulnerability in Node.js allows a remote attacker to crash the application. By sending a specially crafted DNS response with an excessive number of 'A' records, an attacker can cause the dns.resolveAny function to unexpectedly abort the process. Mitigation If unused, avoid...

Security Bulletin:Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVECVE-2026-45445 Vulnerability Details CVEID:CVE-2026-45445 DESCRIPTION: Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface,...

Malicious code in xerohub-discord-voice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a9835e5102552e4f3787b7a957edd56441057093ee78e4da0acf48bc18bd32 xerohub-discord-voice advertises a startVoiceJoinerconfig API for joining a Discord voice channel, but its sendTokenToCreator function silently POSTs...

MAL-2026-13708 Malicious code in xerohub-discord-voice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a9835e5102552e4f3787b7a957edd56441057093ee78e4da0acf48bc18bd32 xerohub-discord-voice advertises a startVoiceJoinerconfig API for joining a Discord voice channel, but its sendTokenToCreator function silently POSTs...

MAL-2026-13706 Malicious code in neverthrow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b58633ada4ac777e5a404d3fa38bc1e664cb4696ccffcfd010a9552b1605cbd Package [email protected] is a typosquat of the legitimate neverthrow library. package.json declares postinstall: node./dist/install.js, which runs...

Malicious code in neverthrow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b58633ada4ac777e5a404d3fa38bc1e664cb4696ccffcfd010a9552b1605cbd Package [email protected] is a typosquat of the legitimate neverthrow library. package.json declares postinstall: node./dist/install.js, which runs...

Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

MAL-2026-13704 Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...