329394 matches found
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
Security update for poppler
This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts...
CLSA-2026-1792577303 ghostscript: Fix of CVE-2026-39919
CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 decoder when components use different subsampling factors...
CLSA-2026-1792576797 ghostscript: Fix of CVE-2026-39919
CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 decoder when components use different subsampling factors...
CVE-2026-112062
A flaw was found in lwIP. An adjacent attacker on the local network can cause a Denial of Service DoS by sending specially crafted multicast Domain Name System mDNS responses with invalid domain names or record lengths. Processing these malformed packets during a service search triggers a...
CVE-2026-112063
A flaw was found in libstrophe. A malicious XMPP Extensible Messaging and Presence Protocol server can exploit a stack-based buffer overflow in the SCRAM Salted Challenge Response Authentication Mechanism authentication handler by sending an oversized salt value. This issue allows an attacker to...
CVE-2026-112059
A flaw was found in liblas. By convincing a user to process a specially crafted LAS file containing an oversized schema record, an attacker can trigger an integer truncation issue during memory allocation. This flaw leads to a heap-based buffer overflow, causing an application crash or memory...
CLSA-2025-1760713752 Fix of 19 CVEs
Ubuntu: 4.15.0-252.263 CVE-url: https://ubuntu.com/security/CVE-2022-43945 - NFSD: Protect against send buffer overflow in NFSv3 READ Focal update: v5.4.285 upstream stable release LP: 2089233 // CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924 - fbdev: pxafb: Fix possible us...
CVE-2026-95117
A flaw was found in jsmn. A remote attacker can exploit a buffer overflow by providing specially crafted JSON input to the parser. Successful exploitation causes the application to crash, resulting in a Denial of Service DoS...
CLSA-2026-1772815097 Fix of 104 CVEs
CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...
SUSE-SU-2026:24368-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. -...
BIT-NGINX-GATEWAY-2026-93479 NGINX map directive and regex matching vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
BIT-NGINX-2026-93479 NGINX map directive and regex matching vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
BIT-NGINX-GATEWAY-2026-15176 NGINX ngx_http_core_module vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
BIT-NGINX-2026-15176 NGINX ngx_http_core_module vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
CLSA-2026-1773872435 Fix of 137 CVEs
Miscellaneous Ubuntu changes - update-from-bionic-master repo has been updated Miscellaneous upstream changes - debian: add control and changeg files Ubuntu: 4.15.0-254.265 CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in...
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
Security update for busybox
This update for busybox fixes the following issues: CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message bsc1282575. CVE-2026-88831: httpd silently fails open when IP deny...
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
Vulnerabilities in libxml2 (CVE-2026-86140 CVE-2026-86141 CVE-2026-86143 CVE-2026-86144) affect AIX
IBM SECURITY ADVISORY First Issued: Wed Oct 21 05:56:41 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory12.asc Security Bulletin: Vulnerabilities in libxml2 CVE-2026-86140, CVE-2026-86141, CVE-2026-86143,...