Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:4418-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587...

CVE-2026-27280

dngrendertask::ProcessArea의 경계를 벗어난 쓰기 Adobe DNG SDK / Android 일반 DNG 파일에서 Android의 공개 이미지 디코딩 API 를 통해 도달하며, Galaxy S25에서 기기 자체의/system/lib64/libdngsdk.so 를 사용하여 재현되었습니다. 취약: DNG SDK 1.7.1 빌드 2410 / 2471 2410은 테스트 기기에 탑재된 버전 수정: 빌드 2502 DNGREQUIREsrcArea.Size == dstArea.Size + srcArea 인덱싱 기기:...

moc3ingbird

Future Work 이 공간에서의 향후 작업은Sakura Motion 조직 아래에서 이루어지며, 우리의 Core 재작성: https://github.com/SakuraMotion/PurismCore로 시작됩니다. MOC3ingbird DoS 日本語版：READMEJA.md 이 저장소는 로드하려는 모든 애플리케이션을 충돌시키는 간단한 Live2D 모델을 포함하고 있습니다: 서비스 거부 공격. ImHex hex editor가 설치되어 있다면, src/moc3.hexpat 패턴 파일을 사용하여 MOC3 파일을 검사하고 편집할 수...

CVE-2020-12446

CVE-2020-12446 자세한 설명은 WriteUp에서 확인할 수 있습니다. 25h2에서 실행하려면 오프셋 하나를 변경해야 하며, 해당 값은 주석 줄에 제공되어 있습니다...

CVE-2023-34853

CVE-2023-34853 이 저장소는 CVE-2023-34853에 대한 세부 정보를 공개하기 위해 사용됩니다. 이 취약점은 Supermicro 마더보드 X12DPG-QR 1.4b에 존재하며 버전 1.5에서 수정될 예정입니다. BIOS 펌웨어 내 SmcSecureErase 파일GUID: 2B7C2FD1-C1CF-AB1D-C3BB-D1D691FB131E에서 오프셋 0x2CC2에 스택 오버플로우 취약점이 있습니다. 취약점이 있는 추정 코드는 다음과 같습니다: char fastcall sub2C20int a1, unsigned...

Rocky Linux 10.1 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc (crlsa-2025_23940)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523940 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2025_23323)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523323 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2025_23342)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523342 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 cpython: Python HTMLParser quadratic complexity...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779371406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779371406 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size ...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-90176

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47567

The NVIDIA GPU Display Driver for Linux contains a vulnerability in its kernel mode layer . A user can cause uncontrolled resource consumption by exhausting the DRM VMA offset address space , which may lead to a denial of service . No specific patch versions or exploit links are provided in the d...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

ROS-20260930-73-0141

The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to a offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CentOS Linux 8.4 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1779356468)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1779356468 advisory. - vim is vulnerable to Out-of-bounds Read CVE-2021-4166 - Access of Memory Location Before Start of Buffer in GitHub repository...

CVE-2026-84782

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

UBUNTU-CVE-2026-84782

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...