4950 matches found
Astra Linux – Vulnerability in sane-backends
A out-of-bounds read in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, also known as GHSL-2020-081...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup of FB if dpuformatpopulatelayout fails If dpuformatpopulatelayout fails, then FB is prepared, but not cleaned up. This results in the pincount being leaked from the GEM object, causing a crash during DRM file...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: net: openvswitch: removed the never-working support for setting nsh fields. The validation of the setnsh... action is completely incorrect. It involves the nshkeyputfromnlattr function, which is the same function used to...
CVE-2026-93317: Improper Validation of Integrity Check Value
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...
PT-2026-106257
Name of the Vulnerable Software and Affected Versions Docker Buildx Bake affected versions not specified Description Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This allows an untrusted Bake definition to expose a readable file by using a...
PT-2026-106063
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...
Malicious code in rgx33-flex-layout-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02200327d66cf0661b787f58049b55b5fbb95dfb76fbb81a679cc71439bd85eb Package name and exports thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry, etc. impersonate internal Wix thunderbolt registry...
MAL-2026-17521 Malicious code in rgx33-flex-layout-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02200327d66cf0661b787f58049b55b5fbb95dfb76fbb81a679cc71439bd85eb Package name and exports thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry, etc. impersonate internal Wix thunderbolt registry...
[SECURITY] Fedora 45 Update: scribus-1.6.6-10.fc45
Scribus is an desktop open source page layout program with the aim of producing commercial grade output in PDF and Postscript, primarily, though not exclusively for Linux. While the goals of the program are for ease of use and simple easy to understand tools, Scribus offers support for profession...
Reversing the Clock: Layout-Aware Recovery of Design Intent from Clock Distribution Networks
Hardware reverse engineering supports competitive analysis and hardware assurance by recovering information about an integrated circuit IC from its physical implementation. While existing techniques primarily recover the gate-level netlist, which represents logical functionality, they often...
CLEANSTART-2024-BK55954 Type confusion in Blink layout in Google Chrome prior to 93
Security vulnerability affects the chromium package. Type confusion in Blink layout in Google Chrome prior to 93...
AlmaLinux 9.2 [TuxCare] Security Update: harfbuzz / harfbuzz-devel / harfbuzz-icu (ALMALINUX9.2:CLSA-2025:1745945560)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745945560 advisory. - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of...
Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_16589)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516589 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...
Rocky Linux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1788195197)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788195197 advisory. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but...
AlmaLinux 9.2 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.2:CLSA-2026:1788187301)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788187301 advisory. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but do...
AlmaLinux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1788195197)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788195197 advisory. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but do...
Rocky Linux 10.0 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_16157)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516157 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...
Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2025_16260)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516260 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...
ROOT-APP-MAVEN-CVE-2026-34481 CVE-2026-34481 in org.apache.logging.log4j:log4j-layout-template-json - Patched by Root
Root has patched CVE-2026-34481 in the org.apache.logging.log4j:log4j-layout-template-json package for Root:Maven. Multiple fixed versions available...