3707 matches found
UBUNTU-CVE-2025-29069
A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations...
Security update for openvpn
This update for openvpn fixes the following issues: CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages bsc1235147. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
Stream HTTP wrapper truncates redirect location to 1024 bytes
...
PT-2025-14373 · Crates.Io · Pyo3
PyString::from object took &str arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This could lead the Python interpreter to read beyond the end of the &str data and potentially leak contents of the out-of-bounds read by raising a Python exceptio...
Little CMS 安全漏洞
Little CMS lcms or liblcms is an open source color management system by the individual developer Marti Maria. The system provides black point compensation, handling of multiple pixel formats, profile editing, and other features. A security vulnerability exists in Little CMS version 2.16, which...
CVE-2025-1861 Stream HTTP wrapper truncates redirect location to 1024 bytes
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC911...
Security update for openvpn
This update for openvpn fixes the following issues: CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages bsc1235147. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2025:1053-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages bsc1235147...
SUSE-SU-2025:20252-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: strictly don't allow NUL bytes in headers bsc1233285 glgoGNOME/libsoup377. - CVE-2024-52532: websocket: Process the frame as soon as we read data bsc1233287 glgoGNOME/libsoup391. - CVE-2024-52531: be more robust against invalid...
UBUNTU-CVE-2022-49761
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...
CLSA-2025-1742391294 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-based buffer overflow in disassemblebytes function...
CLSA-2025-1742379365 Fix CVE(s): CVE-2025-0840
SECURITY UPDATE: stack-based buffer overflow via manipulation of argument - debian/patches/CVE-2025-0840.patch: Fix stack-buffer-overflow at objdump disassemblebytes by restricting insnwidth to range 1-49 - CVE-2025-0840...
CLSA-2025-1742232795 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...
binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...
CVE-2025-1057
A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...
CLSA-2025-1741964468 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
...
CLSA-2025-1741787747 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...