6095 matches found
Updated tomcat packages fix security vulnerabilities
The updated packages fix security vulnerabilities: XSS in number guess example. CVE-2026-50229 Bad ornext processing in RewriteValve. CVE-2026-53404 Invalid CRL configuration doesn't trigger failure for FFM Connector. CVE-2026-53434 Logged effective web.xml is incomplete. CVE-2026-55276...
Updated php packages fix security vulnerabilities
This update brings the latest version of php 8.2 and fixes some security vulnerabilities...
Updated acl attr packages fix security vulnerabilities
The updated acl and attr packages fix security issues...
Updated libvncserver packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Heap Out-of-Bounds Read in HandleUltraZipBPP due to unchecked subrectangle count. CVE-2026-32853 NULL pointer dereferences in httpd proxy handlers via malformed CONNECT/GET requests. CVE-2026-32854 LibVNCClient Tight Gradient decoding allows...
Updated corosync and libqb packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Denial of service and information disclosure via crafted udp packet. CVE-2026-35091 Denial of service via integer overflow in join message validation. CVE-2026-35092 Additionally, libqb solves a missing runtime dependency on qb-blackbox...
Updated perl packages fix security vulnerabilities
The updated Mageia 10 perl packages contain security fixes for CVE-2026-13221, CVE-2026-57432 and CVE-2026-57433. The Mageia 9 perl packages were not affected by CVE-2026-13221, they are now updated with fixes for CVE-2026-57432 and CVE-2026-57433...
Updated squid packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...
Updated unbound packages fix security vulnerabilities
Unbound packages updated to version 1.25.2 which incorporates a number of security and bug fixes...
Updated librabbitmq packages fix security vulnerabilities
The updated packages fix security vulnerabilities: An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a proce...
Updated perl-Unicode-LineBreak package fixes a security vulnerability
The updated package fixes a security vulnerability: Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. CVE-2026-8594...
Updated perl-GD package fixes a security vulnerability
The updated package fixes a security vulnerability: GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. CVE-2026-11526...
Updated kernel, kmod, bluez, firmware, wireless-regdb and drakx-installer-images packages fix security vulnerabilities
Upstream kernel version 6.18.39 fixes bugs and vulnerabilities. The kmod, bluez, wireless-regdb, firmware and drakx-installer-images packages have been updated to work with this new kernel...
Updated perl-DBI packages fix security vulnerabilities
The updated packages fix several security issues...
Updated nghttp2 packages fix a security vulnerability
The updated packages fix a security vulnerability: HTTP Request/Response Smuggling via Upgrade Request with Content-Length. CVE-2026-58055...
Updated libxfont2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow. CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow. CVE-2026-56002 computeProps Property Buffer Heap Buffer Overflow. CVE-2026-56003...
Updated 389-ds-base packages fix a security vulnerability
The updated packages fix a security vulnerability: Unbounded ldap controls count in getldapmessagecontrolsext causes cpu and heap amplification remote dos. CVE-2026-9064...
Updated libslirp packages fix a security vulnerability
The updated packages fix a security vulnerability: TCP URG OOB Read Information Leak. CVE-2026-9539...
Updated gstreamer1.0-libav packages fix security vulnerability
Heap corruption in gst-libav AV protocol pipe. CVE-2026-52717...
Updated memcached packages fix security and other issues
The updated packages fix bugs including security ones...
Updated sqlite3 packages fix security vulnerabilities
CVE-2026-50812: A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changesetapplyv3 applies a...
Updated libyang packages fix a security vulnerability
The updated packages fix a security vulnerability: Heap Use-After-Free Write in XML Metadata Parsing. CVE-2026-41401...
Updated nginx packages fix security vulnerabilities
CVE-2026-42533: Heap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string...
Updated x11-server x11-server-xwayland tigervnc packages fix security vulnerabilities
The updated packages fix security vulnerabilities: glamor Font Atlas Heap Buffer Overflow. CVE-2026-55999 GLX contextTags Use-After-Free in CommonMakeCurrent. CVE-2026-56000...
Updated giflib packages fix a security vulnerability
The updated packages fix a security vulnerability: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. CVE-2026-26740...
Updated yelp packages fix a security vulnerability
The updated packages fix a security vulnerability: Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications. CVE-2026-13601...
Updated graphite2 packages fix a security vulnerability
The updated packages fix a security vulnerability: Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range. CVE-2026-50593...
Updated vorbis-tools package fixes a security vulnerability
The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...
Updated libnfs packages fix a security vulnerability
The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...
Updated wget packages fix security vulnerabilities
Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...
Updated transmission packages fix a security vulnerability
The updated packages fix a security vulnerability: Transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths. CVE-2026-38978...
Updated libevent packages fix security vulnerabilities
The updated packages fix some security vulnerabilities...
Updated lrzip package fixes security vulnerabilities
The updated package fixes security vulnerabilities: ckolivas lrzip stream.c lzmadecompressbuf use after free. CVE-2025-15570 ckolivas lrzip strtoll.c GIstrtollinternal null pointer dereference. CVE-2025-9396...
Updated dnsmasq packages fix security vulnerabilities
The updated dnsmasq packages fix multiple security issues: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an...
Updated socat package fixes a security vulnerability
The updated package fixes a security vulnerability: Heap Buffer Overflow via SOCKS5 Reply Parser. CVE-2026-56123...
Updated apache packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Apache HTTP Server: modldap per-dir use-after-free. CVE-2026-29167 Apache HTTP Server: modproxyftp XSS. CVE-2026-29170 Apache HTTP Server: modproxyhtml buffer overflow. CVE-2026-34355 Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow...
Updated cifs-utils packages fix a security vulnerability
The updated packages fix a security vulnerability: Local privilege escalation via forged cifs.spnego key description in cifs.upcall. CVE-2026-12505...
Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
Updated golang packages fix security vulnerabilities
The updated packages fix security vulnerabilities: mime: quadratic complexity in WordDecoder.DecodeHeader. CVE-2026-42504 net/textproto: arbitrary input are included in errors without any escaping. CVE-2026-42507 crypto/x509: split candidate hostname only once. CVE-2026-27145 os: Root escape via...
Updated libssh2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Heap Buffer Over-read via sftpsymlink in sftp.c. CVE-2025-15661 libssh2 userauth.c userauthpassword integer overflow. CVE-2026-7598 Pre-Authentication DoS via SSHMSGEXTINFO Handler. CVE-2026-55199 Out-of-Bounds Write via Unchecked packetlength in...
Updated php8.4 and php8.5 packages fix security vulnerabilities
The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...
Updated xmlstarlet package fixes a security vulnerability
The updated package fixes a security vulnerability: XML external entity vulnerability. References: https://lists.fedoraproject.org/archives/list/[email protected] oraproject.org/message/KDR5XRMVBCDZ4HWDCGLKDVKGSCWACG33/...
Updated nginx packages fix security vulnerabilities
ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...
Updated haveged package fixes a security vulnerability
The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...
Updated perl-Imager package fixes security vulnerabilities
The updated package fixes security vulnerabilities: The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim method is called on a crafted input image. CVE-2024-53901 Imager versions before 1.032 fo...
Updated php packages fix a security vulnerability
The updated php packages fix a security issue: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...
Updated sqlite3 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: SQLite before 3.53.2 Memory Corruption in FTS5 Extension. CVE-2026-11822 SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate. CVE-2026-11824...
Updated python-nltk packages fix security vulnerabiliy
URL-Encoded Path Traversal in nltk.data.load Allows Arbitrary Local File Read. CVE-2026-54293...
Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities
The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...