CVE-2026-112275

Netpbm versions through 11.16.00 are vulnerable to a heap out-of-bounds write in the rasttopnm Sun rasterfile run-length decoder, specifically within the pr_load_image function in converter/other/rast.c. An attacker can exploit this by providing a byte-encoded rasterfile featuring tiny dimensions...

CVE-2026-112275

Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder prloadimage in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past mdimage...

CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors

RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...

CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors

RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...

EUVD-2026-104311

RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...

CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors

RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...

CVE-2026-112262

RisingWave versions before 3.1.0 are susceptible to a missing authorization vulnerability (CWE-862) involving posix_fs and fs connectors . Attackers with schema CREATE privileges can exploit this by setting posix_fs.root or fs.path to arbitrary directories. This allows low-privileged SQL users to...

CLSA-2026-1780301172 Fix of 19 CVEs

CVE-2025-38715 - hfs: fix slab-out-of-bounds in hfsbnoderead CVE-2025-38715 CVE-2023-53432 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 CVE-2025-39891 - wifi: mwifiex: Initialize the chanstats array to zero CVE-2025-39891 CVE-2025-38666 - net: appletalk: Fix...

USN-8937-1 openssh, openssh-gssapi vulnerabilities

It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...

CLSA-2025-1757961506 kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

CLSA-2026-1792411866 rsync: Fix of CVE-2026-70461

CVE-2026-70461: heap out-of-bounds write in addimpliedinclude -- trailing backslash not counted when sizing the implied-include rule...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

Important: Red Hat Security Advisory: mariadb11.8 security update

An update for mariadb11.8 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Security Bulletin: IBM App Connect Enterprise is vulnerable to an arbitrary file write (CVE-2026-17437)

Summary IBM App Connect Enterprise Toolkit is vulnerable to an arbitrary file write. Vulnerability Details CVEID:CVE-2026-17437 DESCRIPTION: IBM App Connect Enterprise could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction...

OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing

A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an out-of-bounds write during file decoding, which may lead to...

Important: Red Hat Security Advisory: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...