6314 matches found
Updated ntfs-3g package fixes security vulnerabilities
Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...
Updated strongswan packages fix security vulnerabilities
Please see the links for aditional information about the vulnerabilities...
Updated rsync package fixes security vulnerabilities
Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...
Updated nss & firefox packages fix security vulnerabilities
Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the Storage: Quota Manager component. CVE-2026-100759 Sandbox esca...
Updated thunderbird packages fix security vulnerabilities
Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...
Updated polkit package fixes a security vulnerability
Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...
Updated cups package fixes security vulnerabilities
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip. CVE-2026-55453 CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer incomplete fix. CVE-2026-55467 copymodel creates a predictable PPD tempfile without...
Updated perl-DBI package fixes security vulnerabilities
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. CVE-2026-78030 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly...
Updated tor package fixes security vulnerabilities
This update fixes security issues: - Only accept a CONFLUXLINK cell on a plain OR circuit, and refuse to turn a pending conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in the...
Updated antlr4-project package fixes a security vulnerability
ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal. CVE-2026-13503...
Updated libextractor package fixes security vulnerabilities
GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...
Updated hamlib packages fix a security vulnerability
Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches rigctlsendraw in tests/rigctlparse.c, which writes a NUL byte at bufbuflen + 1 outside its 200-byte stack buffer, and rigsendraw in src/rig.c, which copies replylen - 1 bytes instead of the actual nbytes received...
Updated tomcat-native package fixes security vulnerabilities
DoS via TLS handshake. CVE-2026-86243 Insecure OpenSSL options enabled. CVE-2026-86246 Client certificate requirements can be down-graded. CVE-2026-86247...
Updated openssl package fixes security vulnerabilities
DTLS Retransmits Handshake Messages From a Stale Buffer Offset. CVE-2026-84782 Excessive Memory Allocation in Relative CRLDP Processing. CVE-2026-35189 QUIC Unvalidated Amplification Credit may be Over Accounted. CVE-2026-35191 Potential CPU DoS via On^2 Fragment Reassembly in QUIC. CVE-2026-4277...
Updated freetype2 package fixes a security vulnerability
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TTGetVarDesign implementation used by FTGetVarDesignCoordinates. CVE-2026-50811...
Updated capnproto package fixes security vulnerabilities
A negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead CVE-2026-32239. When using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer CVE-2026-32240...
Updated tomcat package fixes security vulnerabilities
OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. CVE-2026-73581 Cross-context authentication mix-up with Jakarta Authentication configured. CVE-2026-75973 Bypass of security constraints for WebSocket endpoints. CVE-2026-76183 Transfer-Encoding honored for...
Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
Updated mingw-pcre2 & pcre2 packages fix security vulnerabilities
PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...
Updated flatpak package fixes security vulnerabilities
Arbitrary file deletion in root context via path traversal in deploy directory export/bin. CVE-2026-97023 Arbitrary write in root context via path traversal in deploy directory files/etc. CVE-2026-97024 World-readable oci authentication token in system-helper cache path. CVE-2026-97025...
Updated xdg-dbus-proxy package fixes a security vulnerability
Message filtering bypass via reply serial. CVE-2026-94422...
Updated libxfont2 package fixes security vulnerabilities
fsreadglyphs heap buffer overflow via cumulative glyph data overflow in libXfont2. CVE-2026-44950 fsreadglyphs heap OOB read/write via encoding array index mismatch in libXfont2. CVE-2026-59679...
Updated tesseract packages fix security vulnerabilities
This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...
Updated tor package fixes security vulnerabilities
Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...
Updated srt package fixes security vulnerabilities
Encryption State Machine Downgrade. CVE-2026-55868 KMREQ/KMRSP Stack-Based Buffer Overflow. CVE-2026-55869...
Updated wireshark package fixes security vulnerabilities
Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...
Updated libgcrypt package fixes a security vulnerability
Libgcrypt: vulnerable to marvin attack. CVE-2024-2236...
Updated python-urwid & python-wcwidth packages fixes a security vulnerability
Insecure PRNG and Information Exposure in urwid Web Display Backend...
Updated python-tornado packages fix security vulnerabilities
Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient Tornado has out-of-bounds memory access via C extension tornado AsyncHTTPClient accumulates decompressed chunks without size limit gzip bomb...
Updated python-pillow packages fix security vulnerabilities
Prevent decompression bomb when parsing PDF WindowsViewer.getcommand injection EPS image infinite loop JPEG2000 image memory usage McIdas out-of-bounds OOB read Out-of-bounds OOB read when saving 1 mode TGA images Out-of-bounds OOB write from large RankFilter sizes Out-of-bounds OOB write from...
Updated fuse-overlayfs package fixes security vulnerabilities
fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/openOTRUNC. CVE-2026-52791 Operations on hardlinked lower-layer files resolving to the wrong layer. CVE-2026-77478...
Updated pam packages fix a security vulnerability
The updated packages fix a security vulnerability: Linux-PAM pamuserdb Observable Timing Discrepancy in Plaintext Password Comparison. CVE-2026-54411...
Updated php package fixes security vulnerabilities
FILTERSANITIZEENCODED does not encode 0xFF IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison Various packet overreads in mysqlnd wire protocol TLS hostname verification falls back to CN after SAN mismatch Heap buffer overflow in phpopensslmatcheswildcardname on...
Updated libxml2 packages fix security vulnerabilities
The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...
Updated p11-kit packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Stack exhaustion via unbounded recursion in rpc attribute parsing. CVE-2026-13757 Integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems. CVE-2026-18938...
Updated libreswan package fixes a security vulnerability
FIPS mode assertion failure via malicious CERT payload. CVE-2026-14957...
Updated erlang package fixes security vulnerabilities
SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...
Updated python3 & python-pip package fixes security vulnerabilities
Please see the references for additional information about vulnerabilities...
Updated udisks2 package fixes a security vulnerability
Local privilege escalation via as-user option spoofing. CVE-2026-7867...
Updated gpsd packages fix a security vulnerability
Command Injection via gnuplot plot title subtype field. CVE-2026-58459...
Updated python-gitpython packages fix security vulnerabilities
Denial of Service via catastrophic backtracking ReDoS in Actor.nameemailregex — commit author/committer field parsing Repository content can impersonate the git directory, leading to arbitrary code execution Residual of GHSA-hmq2-w58f-27jc: the fix validates the .gitmodules name but the sibling...
Updated python-webob packages fix a security vulnerability
Location header normalization during redirect leads to open redirect - again...
Updated unbound packages fixes security vulnerabilities
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY Possible heap buffer overflow during DNSSEC canonicalization CNAME synthesis could lead to heap corruption Possible ZONEMD verification bypass window Use-after-free in DoQ stream output buffer on reset re-transmission...
Updated fuse3 package fixes security vulnerabilities
This update brings security fixes provided by upstream...
Updated perl-Net-DNS packages fix security vulnerabilities
Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. CVE-2026-64194 Net::DNS versions before 1.57 for Perl allow memory exhaustion v...
Updated thunderbird & thunderbird-l10n packages fix security vulnerabilities
Ambiguous parsing of mail headers. CVE-2026-92238 Buffer overrun in IMAP. CVE-2026-92239 Out-of-bounds read in IMAP response parser. CVE-2026-92240 Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92005 Privilege escalation due to incorrect boundary conditions in the Graphics:...
Updated kbd packages fix a security vulnerability
Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...
Updated perl-URI packages fix a security vulnerability
Apply Unicode NFC normalization in URI::idna nameprep so IDNA host encoding matches other clients instead of emitting a non-standard, non-round-tripping A-label CVE-2026-19953...