325575 matches found
RLSA-2026:84574 Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling...
RLSA-2026:85193 Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...
xorg-x11-server security update
An update is available for xorg-x11-server. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org is an open-source implementation of the X Window System. It...
webkit2gtk3 security, bug fix, and enhancement update
An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...
xorg-x11-server-Xwayland security update
An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...
RLSA-2026:84584 Critical: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafte...
webkit2gtk3 security, bug fix, and enhancement update
An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...
RLSA-2026:84586 Important: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly CVE-2026-102557 libsoup: libsoup:...
libsoup security update
An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...
CVE-2026-92477
A flaw was found in the Linux kernel, specifically within the scsi: ufs: debugfs component. The ufssavederrwrite function copies user-provided input into a stack buffer without ensuring sufficient space for a string terminator. If the input completely fills the buffer, it overwrites the terminato...
CVE-2026-90435
A flaw was found in the Linux kernel's RDMA/mlx5 component. A local attacker could exploit an integer overflow vulnerability when processing user-supplied buffer size values. This flaw occurs because large user inputs can cause an integer overflow during buffer size calculation, leading to a...
CLSA-2026-1792496065 compat-openssl11: Fix of CVE-2026-63072
CVE-2026-63072: fix heap buffer overflow in AES-WRAP-PAD unwrap...
CVE-2026-90366
A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting mt7996 devices. When a Channel Switch Announcement CSA countdown is active and Multiple Basic Service Set Identifier MBSSID is enabled, the driver may attempt to write more beacon data than allocated. This can lead t...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43855
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43858
A stack-based buffer overflow vulnerability exists that could allow a remote authenticated attacker to achieve arbitrary code execution . No specific affected products, components, root causes, or remediation details are provided in the documents. Exploitation details are not provided.
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
