CVE-2026-64053

A flaw was found in the Linux kernel's block integrity subsystem. Incorrect handling of bio integrity vector counts in the biointegritycopyuser function can lead to an out-of-bounds read during write operations. This vulnerability may allow a local attacker to cause a denial of service or...

[SECURITY] Fedora 44 Update: wget1-1.25.0-4.fc44

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

PT-2026-63308

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated low-privilege user can perform a server-side request forgery SSRF during repository migration. The issue occurs because the validation logic in services/migrations/migrate.go...

Gitea: Local File Inclusion via file:// URI in Migration Restore

Gitea's restore-repo command processes release.yml files from a user-supplied archive. The DownloadURL field in each release attachment is passed to uri.Open without scheme validation. Because uri.Open supports the file:// scheme via os.Open, an operator-level attacker can plant a crafted...

EUVD-2026-43739

Pillow: Heap out-of-bounds write Image.paste / Image.crop via signed coordinate overflow...

CVE-2026-33328

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...

CVE-2026-33327

libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1...

CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

CVE-2026-64192

CVE-2026-64192 affects the Linux kernel (BPF inode storage maps). When CONFIG_BPF_LSM=y and the BPF LSM is not enabled at boot, lsm_prepare() doesn’t run, so the BPF LSM blob size (lbs_inode) remains at the compiled default (8 bytes) instead of a larger offset. This lets a privileged user create/...

EUVD-2026-46012

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

CVE-2026-35591 Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...

CVE-2026-35591

libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...

CVE-2026-35591

CVE-2026-35591 concerns libvips' TIFF decoding via the tiffload path. The issue arises when processing a TIFF image containing a JPEG/JPEG2000-encoded tile, where the number of channels could be mis-determined, enabling a possible heap-based buffer overflow. Affected versions are libvips ≤ 8.18.1...

CVE-2026-33327 Possible integer overflow leading to potential heap-based buffer overflow

libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1...

CVE-2026-53394

A flaw was found in the Linux kernel's Network File System NFS version 4.0 NFSv4.0 OPEN implementation. A race condition can occur when two NFSv4.0 OPEN threads with the same owner string attempt to open a file, and a concurrent thread inserts a new unconfirmed owner. This can lead to a memory le...

CVE-2026-12701

A path traversal vulnerability was found in pulpcore. The relativepathvalidator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relativepath containing...

CVE-2026-53378

A flaw was found in the Linux kernel's Direct Rendering Manager DRM color operation module drm/colorop. This vulnerability arises from improper reference tracking of blob properties during state duplication, destruction, and reset operations. An attacker with local access could potentially exploi...

CVE-2026-63751

SurrealDB before 3.1.0 contains a field-level permission bypass vulnerability in JSON Patch operations. An authenticated attacker can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including those restricted by field-level SELECT permissions...

CVE-2026-63733

SurrealDB prior to 3.2.0 is affected by a permissions bypass where data-modifying statements inside a PERMISSIONS clause execute with enforcement disabled. When an attacker has permission to perform a guarded operation, they can embed CREATE, UPDATE, DELETE, or UPSERT statements within the PERMIS...

PT-2026-61593

A path traversal vulnerability was found in pulpcore. The relative path validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative path containin...