[SECURITY] [DLA 4852-1] clamav security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4852-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 23, 2026 https://wiki.debian.org/LTS -...

Debian dla-4852 : clamav - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4852 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4852-1 [email protected]...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/hdr.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned char. This likely leads to a disruption in the...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick’s MagickCore/resize.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, specifically a division by zero in mathematics. This likely results in a disruption to the application’s functionality, but it may als...

Astra Linux – vulnerability in Imagemagick

A flaw was found in ImageMagick’s MagickCore/quantum.h. An attacker submitting a specially crafted file for processing by ImageMagick could trigger undefined behavior, resulting in values outside the permissible range for float and unsigned char. This would most likely compromise application...

Astra Linux – vulnerability in Imagemagick

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values outside the range of type unsigned long long. This would most likely affect application availability, but could potentially cause...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick within MagickCore/statistic.c. An attacker who submits a crafted file processed by ImageMagick could induce undefined behavior, resulting in an excessively large value for the 64-bit type ssizet. This likely leads to a disruption in the application’s...

Astra Linux – vulnerability in Imagemagick

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values outside the range of unsigned long type. This would most likely affect application availability, but could potentially...

CVE-2026-84519

An out-of-bounds write issue in the AppleDouble component was addressed with improved bounds checking. Mounting a disk image containing maliciously crafted files may lead to unexpected system termination . This vulnerability affects iOS 26.7 and later , iPadOS 26.7 and later , macOS Golden Gate 2...

OESA-2026-3757 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

Astra Linux – Vulnerability in libde265

There is an assertion scalinglistpredmatrixiddelta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding the file. This can allow attackers to cause a Denial of Service DoS by running the application with a crafted file, or potentially causing unspecified other impacts...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file processed by OpenEXR to trigger an integer overflow. The greatest threat of this vulnerability is to system availability...

Astra Linux – Vulnerability in openexr

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet is less than 64 bits. This could result in invalid bytesPerLine and maxBytesPerLine values, which may lead to issues with application stability or other attack vectors...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s B44 uncompression functionality in versions prior to 3.0.0-beta. An attacker who can submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting the availability of the application...

Astra Linux – Vulnerability in libxml2

There is a flaw in the XML entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who can provide a crafted file for processing by an application that utilizes the affected functionality of libxml2 may trigger an out-of-bounds read. The most likely impact of this flaw i...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. An out-of-bounds write operation in the DJVU::filterbv function, through a crafted djvu file, may cause the application to crash and lead to other issues...

Astra Linux – Vulnerability in libraw

A flaw was discovered in LibRaw. A heap-buffer-overflow in the raw2imageex function, caused by a maliciously crafted file, may lead to an application crash...

SUSE-SU-2026:23363-1 Security update for gzip

This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution bsc1269623. - crafted LZW file followed by a crafted LZH file can...

PYSEC-2026-3961

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

AZL-98208 CVE-2026-15310 affecting package python3 for versions less than 3.12.15-1

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...