15482 matches found
AZL-83282 CVE-2026-31446 affecting package kernel for versions less than 6.6.134.1-2
In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in updatesuperwork when racing with umount Commit b98535d09179 "ext4: fix bugon in startthishandle during umount filesystem" moved ext4unregistersysfs before flushing ssbupdwork to prevent new error work...
AZL-83261 CVE-2026-31441 affecting package kernel for versions less than 6.6.134.1-2
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxdwqdisablecleanup which is called from the reset path for a workqueue, sets the wq type to NONE, which for other parts of the driver mean that the wq is empty all its resourc...
AZL-83315 CVE-2026-31439 affecting package kernel for versions less than 6.6.134.1-2
In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error handling devmregmapinitmmio returns an ERRPTR upon error, not NULL. Fix the error check and also fix the error message. Use the error code from ERRPTR instead of the wrong value in r...
AZL-85536 CVE-2026-6846 affecting package gdb for versions less than 13.2-9
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...
AZL-85514 CVE-2026-6846 affecting package binutils for versions less than 2.41-13
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...
AZL-85517 CVE-2026-6845 affecting package binutils 2.41-13
A flaw was found in binutils, specifically within the readelf utility. This vulnerability allows a local attacker to cause a Denial of Service DoS by tricking a user into processing a specially crafted Executable and Linkable Format ELF file. The exploitation of this flaw can lead to the system...
AZL-85560 CVE-2026-6843 affecting package nano for versions less than 6.4-3
A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...
AZL-83249 CVE-2026-31431 affecting package kernel for versions less than 6.6.137.1-1
In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algifaead since the source and destination...
AZL-85706 CVE-2026-31431 affecting package kernel-hwe for versions less than 6.12.85.1-1
In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algifaead since the source and destination...
AZL-83181 CVE-2026-40706 affecting package ntfs-3g for versions less than 2022.10.3-3
In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path stat, readdir, open when...
AZL-83145 CVE-2026-35238 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-83124 CVE-2026-35237 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-83154 CVE-2026-34308 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: JSON. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...
AZL-83157 CVE-2026-34304 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-83151 CVE-2026-34303 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
AZL-83115 CVE-2026-34278 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
AZL-83160 CVE-2026-34276 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83148 CVE-2026-34267 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
AZL-83136 CVE-2026-34271 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83178 CVE-2026-22015 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83142 CVE-2026-22017 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
AZL-83127 CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
AZL-83169 CVE-2026-22005 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-83139 CVE-2026-22002 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-83163 CVE-2026-22001 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
AZL-83166 CVE-2026-22004 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-83121 CVE-2026-21998 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-84065 CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to modify file attributes outside the configured chroot directory. The SFTP daemon sshsftpd stores the raw, user-supplied path in file...
AZL-56723 CVE-2024-12797 for package cloud-hypervisor-cvm is not applicable
This CVE either no longer is or was never applicable...
AZL-9803 CVE-2022-31624 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9785 CVE-2009-1890 for package httpd is not applicable
This CVE either no longer is or was never applicable...
AZL-9802 CVE-2022-31623 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9801 CVE-2022-31622 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9800 CVE-2022-31621 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9408 CVE-2022-27444 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9410 CVE-2022-27446 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9415 CVE-2022-27452 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9359 CVE-2022-27385 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9358 CVE-2022-27382 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9340 CVE-2022-24801 for package python-twisted is not applicable
This CVE either no longer is or was never applicable...
AZL-9179 CVE-2018-9057 for package terraform is not applicable
This CVE either no longer is or was never applicable...
AZL-9219 CVE-2019-1010238 for package pango is not applicable
This CVE either no longer is or was never applicable...
AZL-28619 CVE-2023-4273 for package hyperv-daemons is not applicable
This CVE either no longer is or was never applicable...
AZL-26947 CVE-2023-33199 for package skopeo is not applicable
This CVE either no longer is or was never applicable...
AZL-10315 CVE-2022-31144 for package redis is not applicable
This CVE either no longer is or was never applicable...
AZL-83087 CVE-2026-5928 affecting package glibc 2.38-21
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...
AZL-83093 CVE-2026-5450 affecting package glibc 2.38-21
Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow...
AZL-83432 CVE-2026-3219 affecting package python-virtualenv for versions less than 20.36.1-4
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
AZL-83102 CVE-2026-5958 affecting package sed for versions less than 4.9-2
When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to its target and stores the resolved path for determining when output is written, 2. opens the original...
AZL-83096 CVE-2026-31430 affecting package kernel for versions less than 6.6.137.1-1
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a certificate with empty Basic Constraints or Key Usage extension because the first byte of the extension is read before...