Linux Distros Unpatched Vulnerability : CVE-2026-19672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it...

AZL-97038 CVE-2026-19672 affecting package python3 3.12.14-1

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

DEBIAN-CVE-2026-19672

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

CVE-2026-19672

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

PSF-2026-38

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

CVE-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

EUVD-2026-62536

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

CVE-2026-19672

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

CVE-2026-19672

CVE-2026-19672 affects Python's tarfile module. The tar and data extraction filters contain a path containment bypass: the check validates the resolved path, but intermediate directories are created from the member name as given. A crafted archive member name (e.g., ../evil/../dest/sub/file) can ...

BIT-POSTGRESQL-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-58084

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

EUVD-2026-62338

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

CVE-2026-72068

A flaw was found in the Linux kernel's posix-cpu-timers component on 32-bit systems. An integer truncation vulnerability occurs in the updaterlimitcpu function when converting the RLIMITCPU value to nanoseconds. This issue causes the process CPU timer to be programmed to fire prematurely for...

PT-2026-78481

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description In the tarfile module, the tar and data extraction filters allow the creation of empty directories outside the intended destination on POSIX platforms. This occurs when a member name leaves th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101997 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102006 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp...

Linux Distros Unpatched Vulnerability : CVE-2026-72068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100544 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100140 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099718 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthori...