4270 matches found
[SECURITY] Fedora 43 Update: python-diskcache-5.6.3-12.fc43
DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...
[SECURITY] Fedora 44 Update: python-diskcache-5.6.3-12.fc44
DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...
PT-2026-36416
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The drm compat ioctl path accepts a user-controlled pointer and dereferences it into a table of function pointers. This pattern is characteristic of Spectre problems, which are...
nginx:1.24 security update
1.24.0-2.0.1 - Remove Red Hat references Orabug: 29498217 1:1.24.0-2 - Resolves: RHEL-146517 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 1:1.24.0-1 - Resolves: RHEL-14714 - add nginx:1.24 to RHEL 8.10 1:1.22.1-2 - Resolves:...
Moderate: Red Hat Security Advisory: compat-openssl11 security update
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Moderate: Red Hat Security Advisory: compat-openssl11 security update
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
RHEL 9 : compat-openssl11 (RHSA-2026:5217)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:5217 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the...
CLSA-2026-1773999595 compat-openssl11: Fix of CVE-2025-69419
CVE-2025-69419: Fix heap buffer overflow in PKCS12 Unicode to UTF-8 conversion...
SUSE-SU-2026:20922-1 Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459. Other fixes: - Bug fixes for “AAT” shaping, and other shaping micro optimizations. - Fix a shaping...
Why Image Format Conversion Is Becoming a Practical Issue in Web Security and Performance
WebP boosts performance raises compatibility issues, making image format conversion to PNG essential for secure, flexible, and efficient web workflows today...
`tokio-compat` is unmaintained
The tokio-compat crate is unmaintained. It was part of the transition from Tokio 0.1 to 0.2...
[SECURITY] Fedora 44 Update: vim-9.2.148-1.fc44
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
PT-2026-70017
Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description The Linux compatibility layer implementation of the waitid system call fails to zero a stack-declared Linux siginfo t structure when translating it from a FreeBSD siginfo t structure. This...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper handling of integer values in the wolfssladdtochain function. An attacker can cause heap corruption and potentially execute arbitrary code or crash the application by supplying specially crafte...
DEBIAN-CVE-2026-3229
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...
CVE-2026-3229
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...
UBUNTU-CVE-2026-3229
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...
CVE-2026-3229
CVE-2026-3229 describes an integer overflow in wolfSSL’s certificate chain allocation. The heap corruption arises in the static function wolfssl_add_to_chain when certificate data is written beyond the bounds of an insufficiently sized certificate buffer. The issue is triggered via APIs used for ...
CVE-2026-3229 Integer Overflow in Certificate Chain Allocation
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...
CVE-2026-3229
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...