Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

SUSE-SU-2026:4647-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

SUSE-SU-2026:4646-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

SUSE-SU-2026:4645-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

SUSE CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

SUSE CVE-2026-109250

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

SUSE CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

SUSE CVE-2026-109279

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security...

SUSE CVE-2026-109281

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

Important: Red Hat Security Advisory: hplip security update

An update for hplip is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

OpenSIPS buffer error vulnerability

OpenSIPS versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 4.0.0, and 4.0.1 have a buffer error vulnerability. This vulnerability stems from the operation of the rtpproxyoffer/rtpproxyanswer functions in the rtpproxy component, which leads to out-of-bounds read access. This...

Turboderp ExLlamaV2 Buffer Error Vulnerability

Turboderp ExLlamaV2 0.3.2 and earlier versions have a buffer error vulnerability. This vulnerability stems from the incorrect handling of parameters dataoffsets in the STFile.gettensor function of the Tensor Loader component in Safetensors. An attacker can exploit this vulnerability remotely,...

HPE NonStop Java JToolkit command injection vulnerability

HPE NonStop Java JToolkit T2716L11 and earlier versions contain a command injection vulnerability stemming from command injection and buffer overflow issues...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10 have a buffer error vulnerability. This vulnerability stems from the software GSO library in DPDK, which does not check whether the header is suitable for the source segment or the target buffer when copying the packet header to the new mbuf...

Paul Boersma Praat Buffer Overflow Vulnerability

Paul Boersma’s Praat 7.0.02 version has a buffer error vulnerability. This vulnerability stems from an incorrect operation of the whispermodelload function in the external/whispercpp/whisper.cpp file within the Model Loader component. This incorrect operation may lead to out-of-bounds write attac...

gstreamer1-plugins-bad-free Buffer Error Vulnerability

The gstreamer1-plugins-bad-free vulnerability involves a buffer overflow issue. This vulnerability arises from the incorrect calculation of the buffer size for UTF-16LE representations when writing string metadata tags containing BMP-external Unicode characters into ASF containers. This leads to...