6 matches found
Pillow improper exception handling vulnerabilities
Pillow versions from 9.1.0 to 13.0.0 have a vulnerability related to improper exception handling. This vulnerability arises when the ImagingPaletteCacheUpdate function is used with an air-conditioned palette, and the local cache array is not initialized. As a result, the conversion path uses...
AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1772013351)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772013351 advisory. - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for...
getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
...
CVE-2026-0915
Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver...
CVE-2026-0915
Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver...
