9408 matches found
OESA-2026-4737 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common...
OESA-2026-4735 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common...
OESA-2026-4736 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common...
OESA-2026-4734 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
OESA-2026-4732 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
OESA-2026-4733 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
OESA-2026-4731 libnfs security update
Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...
OESA-2026-4730 libnfs security update
Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...
OESA-2026-4729 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4728 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4727 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4726 rubygem-crass security update
Crass is a pure Ruby CSS parser based on the CSS Syntax Level 3 spec. Security Fixes: Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the...
OESA-2026-4725 rubygem-crass security update
Crass is a pure Ruby CSS parser based on the CSS Syntax Level 3 spec. Security Fixes: Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the...
OESA-2026-4723 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...
OESA-2026-4724 rubygem-crass security update
Crass is a pure Ruby CSS parser based on the CSS Syntax Level 3 spec. Security Fixes: Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the...
OESA-2026-4722 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248 Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in th...
OESA-2026-4720 docker security update
Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMat...
OESA-2026-4721 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...
OESA-2026-4719 docker security update
Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMat...
OESA-2026-4718 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls...
OESA-2026-4717 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4716 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4715 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4714 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4712 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4713 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4711 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4710 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a...
OESA-2026-4709 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a...
OESA-2026-4708 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a...
OESA-2026-4707 audiofile security update
The Audio File Library is a C-based library for reading and writing audio files in many common formats. Security Fixes: Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a...
OESA-2026-4706 audiofile security update
The Audio File Library is a C-based library for reading and writing audio files in many common formats. Security Fixes: Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a...
OESA-2026-4705 audiofile security update
The Audio File Library is a C-based library for reading and writing audio files in many common formats. Security Fixes: Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a...
OESA-2026-4704 poppler security update
is a PDF rendering library. Security Fixes: A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has bee...
OESA-2026-4703 poppler security update
is a PDF rendering library. Security Fixes: A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has bee...
OESA-2026-4702 poppler security update
is a PDF rendering library. Security Fixes: A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has bee...
OESA-2026-4701 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4699 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4700 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4698 perl-Cpanel-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...
OESA-2026-4697 perl-Cpanel-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...
OESA-2026-4695 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: A vulnerability classified as critical has been found in libwebsockets affected version unknown. CWE is classifying t...
OESA-2026-4696 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: A vulnerability classified as critical has been found in libwebsockets affected version unknown. CWE is classifying t...
OESA-2026-4694 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: A vulnerability classified as critical has been found in libwebsockets affected version unknown. CWE is classifying t...
OESA-2026-4692 openssh security update
An open source implementation of SSH protocol version 2 Security Fixes: In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.CVE-2026-106587...
OESA-2026-4693 zvbi security update
The ZVBI library provides functions to read from Linux V4L, V4L2 and FreeBSD BKTR raw VBI capture devices, from Linux DVB devices and from a VBI proxy to share V4L and V4L2 VBI devices between multiple applications. It can demodulate raw to sliced VBI data in software, with support for a wide ran...
OESA-2026-4691 openssh security update
An open source implementation of SSH protocol version 2 Security Fixes: In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.CVE-2026-106587...
OESA-2026-4690 openssh security update
An open source implementation of SSH protocol version 2 Security Fixes: In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.CVE-2026-106587...
OESA-2026-4689 rpcbind security update
The utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine. Security Fixes: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial ...
OESA-2026-4687 rpcbind security update
The utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine. Security Fixes: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial ...