869 matches found
MGASA-2026-0505 Updated freeciv package fixes security vulnerabilities
Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...
MGASA-2026-0488 Updated antlr4-project package fixes a security vulnerability
ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal. CVE-2026-13503...
MGASA-2026-0492 Updated thunderbird packages fix security vulnerabilities
Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...
MGASA-2026-0487 Updated rsync package fixes security vulnerabilities
Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...
MGASA-2026-0490 Updated strongswan packages fix security vulnerabilities
Please see the links for aditional information about the vulnerabilities...
MGASA-2026-0470 Updated tesseract packages fix security vulnerabilities
This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...
MGASA-2026-0462 Updated fuse-overlayfs package fixes security vulnerabilities
fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/openOTRUNC. CVE-2026-52791 Operations on hardlinked lower-layer files resolving to the wrong layer. CVE-2026-77478...
MGASA-2026-0460 Updated p11-kit packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Stack exhaustion via unbounded recursion in rpc attribute parsing. CVE-2026-13757 Integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems. CVE-2026-18938...
MGASA-2026-0435 Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
MGASA-2026-0436 Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
MGASA-2026-0429 Updated postfix packages fix security vulnerabilities
Updated packages fix security issues. Please see the references...
MGASA-2026-0422 Updated bind package fixes security vulnerabilities
Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...
MGASA-2026-0424 Updated ntfs-3g packages fix security vulnerabilities
Heap memory corruption when processing a corrupt or maliciously crafted filesystem. CVE-2026-42616 Heap memory corruption when copying index data from root to an index block in a corrupt or maliciously crafted filesystem. CVE-2026-42617 Single-byte heap buffer overflow when decompressing...
MGASA-2026-0425 Updated libssh packages fix security vulnerabilities
Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...
MGASA-2026-0419 Updated python-httplib2 packages fix a security vulnerability
Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling. CVE-2026-59939...
MGASA-2026-0408 Updated cockpit packages fix a security vulnerability
Cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in sendloginhtml. CVE-2026-76235...
MGASA-2026-0403 Updated bzip2 packages fix a security vulnerability
Off-by-One Leading to Out-of-Bounds Write in bzip2. CVE-2026-42250...
MGASA-2026-0404 Updated perl-HTML-FormFu packages fix a security vulnerability
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. CVE-2026-19873...
MGASA-2026-0395 Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities
Enhance TLS certificate handling. CVE-2026-46968 Improve DTLS handshaking. CVE-2026-46917 Enhance JPEG handling. CVE-2026-47010 Enhance XBM image support. CVE-2026-47021 Enhance Jar file processing. CVE-2026-47027 Improve certification checking. CVE-2026-60147 Enhance AWT ImagingLib. CVE-2026-470...
MGASA-2026-0391 Updated glibc package fixes security vulnerabilities
Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...
MGASA-2026-0386 Updated wget packages fix a security vulnerability
Denial of Service in GNU wget. CVE-2026-16599...
MGASA-2026-0384 Updated spice-vdagent packages fix security vulnerabilities
Integer overflow in udscswrite leading to heap buffer overflow. CVE-2026-57965 Path traversal in file transfer via unsanitized filename. CVE-2026-57966...
MGASA-2026-0365 Updated perl-Net-OAuth packages fix security vulnerabilities
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire Net::OAuth versions before 0.3...
MGASA-2026-0371 Updated bubblewrap package fixes security vulnerabilities
Sandbox escape: symlink traversal via /oldroot allows writing files outside sandbox during setup...
MGASA-2026-0363 Updated hplip package fixes security vulnerabilities
Potential Escalation of Privilege and Arbitrary Code Execution. CVE-2026-8631, CVE-2026-8632...
MGASA-2026-0353 Updated openssl packages fix security vulnerabilities
Unbounded Memory Growth in QUIC Server Incoming Channel Queue. CVE-2026-14456 QUIC Server May Trigger Double Free When Processing INITIAL Packet. CVE-2026-18798 Heap Buffer Overflow in CMS Key Unwrapping. CVE-2026-63072 Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...
MGASA-2026-0342 Updated flatpak package fixes security vulnerabilities
Updated flatpak package fixes security vulnerabilities. Please see the links for additional information...
MGASA-2026-0338 Updated avahi packages fix security vulnerabilities
Simple protocol server ignores accepts unlimited connections and logs failures without limit. CVE-2025-59529 Avahi has Uncontrolled Recursion in lookuphandlecname function. CVE-2026-24401 Reachable assertion in transportflagsfromdomain via conflicting publish flags crashes avahi-daemon...
MGASA-2026-0332 Updated roundcubemail package fixes security vulnerabilities
Updated roundcubemail to the 1.6.17 version to fix security vulnerabilities: Some XSS and DoS errors have been corrected. Various vulnerabilities in the password plugin have been fixed. An infinite loop has been fixed...
MGASA-2026-0320 Updated perl-Unicode-LineBreak package fixes a security vulnerability
The updated package fixes a security vulnerability: Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. CVE-2026-8594...
MGASA-2026-0287 Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
MGASA-2026-0267 Updated perl-CSS-Minifier-XS package fixes a security vulnerability
The updated package fixes a security vulnerability: CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. CVE-2026-13593...
MGASA-2026-0272 Updated perl-String-Util package fixes a security vulnerability
The updated package fixes a security vulnerability: String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. CVE-2026-14895...
MGASA-2026-0252 Updated imagemagick packages fix security vulnerabilities
The updated packages fix numerous security vulnerabilities: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797. CVE-2026-25797 Heap Buffer Underwrite in Floyd-Steinberg depth dithering. CVE-2026-48724 Infinite Loop in subimage-search with crafted image. CVE-2026-48733 Stack...
MGASA-2026-0248 Updated libxml2 packages fix a security vulnerability
The updated packages fix a security vulnerability: Denial of service via crafted xsd-validated document. CVE-2026-6732...
MGASA-2026-0235 Updated mariadb packages fix security vulnerabilities
This update to the latest LTS version fixes some severe security vulnerabilities...
MGASA-2026-0231 Updated opensc packages fix security vulnerabilities
These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...
MGASA-2026-0230 Updated perl-Archive-Tar package fixes security vulnerabilities
The updated package fixes security vulnerabilities: Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the...
MGASA-2026-0228 Updated mumble packages fix security vulnerability
Mumble is prone to an out-of-bounds array access, which may result in denial of service client crash...
MGASA-2026-0218 Updated log4cxx packages fix security vulnerability
CVE-2026-40023, Apache Log4cxx, Apache Log4cxx Conan, Apache Log4cxx Brew: Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters...
MGASA-2026-0203 Updated memcached packages fix security vulnerabilities
CVE-2026-47784 In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass. CVE-2026-47783 In memcached before 1.6.42, username data for SASL password database authentication has a timing side...
MGASA-2026-0204 Updated expat packages fix security vulnerabilities
CVE-2026-45186 the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input...
MGASA-2026-0193 Updated openssh packages fix security vulnerabilities
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O legacy scp protocol and without -p preserve mode. CVE-2026-35385 In OpenSSH before 10.3, command execution can occur vi...
MGASA-2026-0188 Updated jq packages fix security vulnerabilities
An integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. CVE-2024-23337 It was discovered that jq did not correctly handle certain string concatenations. An attacker could possibly use this issue to cause a denial of...
MGASA-2026-0172 Updated lxc packages fix security vulnerability
CVE-2026-39402, lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion...
MGASA-2026-0166 Updated perl-Template-Toolkit packages fix security vulnerability
Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. CVE-2026-5090...
MGASA-2026-0159 Updated nginx package fixes a security vulnerability
The updated package fixes a security vulnerability: NGINX ngxhttprewritemodule vulnerability. CVE-2026-9256...
MGASA-2026-0163 Updated bind packages fix security vulnerabilities
Updated bind package fixes security vulnerabilities: BIND 9 server memory exhaustion during GSS-API TKEY negotiation CVE-2026-3039 Amplification vulnerabilities via self-pointed glue records CVE-2026-3592 Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation CVE-2026-3593...