OS: Redhat
Red Hat released a security update for libvpx in RHEL 8.6, fixing critical vulnerabilities including a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for BIND in RHEL 8.2, addressing a critical vulnerability (CVE-2023-3341) that may lead to DoS due to stack exhaustion. |
Red Hat released an important security update for libvpx in Red Hat Enterprise Linux 9, addressing a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for libvpx in RHEL 8.2 addressing important vulnerabilities, including a heap buffer overflow and a crash related to VP9 encoding. |
OS: OpenSuse
An update that solves two vulnerabilities and has one security fix can now be installed. |
An update that solves five vulnerabilities can now be installed. |
An update that solves three vulnerabilities can now be installed. |
An update that solves one vulnerability and has one bug fix can now be installed. |
OS: Suse
An update that solves one vulnerability can now be installed. |
An update that solves two vulnerabilities can now be installed. |
An update that solves two vulnerabilities and has one security fix can now be installed. |
An update that solves five vulnerabilities can now be installed. |
OS: CentOS
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1498 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1486 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1249 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:0957 |
OS: Rocky
Important: thunderbird security update |
Important: firefox security update |
Important: thunderbird security update |
Important: firefox security update |
OS: Scientific
python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6885 SL7 srpm python-0:2.7.5-94.el7_9.src x86_64 python-0:2.7.5-94.el7_9.x86_64 i386 python-libs-0:2.7.5-94.el7_9.i686 - Scientific Linux Development Team |
plexus-archiver: Arbitrary File Creation in AbstractUnArchiver (CVE-2023-37460) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6886 SL7 srpm plexus-archiver-0:2.4.2-6.el7_9.src noarch plexus-archiver-0:2.4.2-6.el7_9.noarch - Scientific Linux Development Team |
bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5691 SL7 srpm bind-32:9.11.4-26.P2.el7_9.15.src i386 bind-export-libs-32:9.11.4-26.P2.el7_9.15.i686 x86_64 bind-export-libs-32:9.11.4-26.P2.el7_9.15.x86_64 noarch bind-license-32:9.11.4-26.P2.el7_9.15.noarch - Scie [More...] |
libssh2: use-of-uninitialized-value in _libssh2_transport_read (CVE-2020-22218) --- This content is derived from https://sso.redhat.com/auth/realms/redhat-external/protocol/saml?SAMLRequest=fZJBT8MwDIX%2FSm85ZWk7yrZonVQxIU0ChDbgwAVlqccipUmJXTb49aQbg3Hh6jy%2F79nOFFVjW1l1tHVLeOsAKakQIZDx7so77BoIKwjvRsPj8qZkW6IWpRBKa0AcBKi3igbaN6L2O2e9qlH0nmJjnLLmE1hSEQWz7giOfsa9fhsuXA37kmUsmUdu1PfQXwSiP%2FdXMaMIoGyD4ljmsCcIESPa4Mlrbw9olizmJXvJ9WgMWmV8qMcTfpGNUq7WxZCvVTEe5dmoUJebKEXsYhAk5ahkeZoXPL3g6eQhHcqikGn2zJInCHhIlg9Sluwb61D2oJJ1wUmv0KB0qgGUpOWqur2RUSjVaY3nLe3%2FPac52Gzaq%2BUhXZh1zmwM1PxnxVNx%2Fjw9HvEu2i3m994a%2FZFU1vrdVVwXQckodPEO1z40iv4P0FdMzTcHqWz7wZHAEROzI%2FPvX5l9AQ%3D%3D&RelayState=https%3A%2F%2Faccess.redhat.com%2Ferrata%2FRHSA-2&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=BrJPc%2FvdbvszAnFEmxMHTWhWO5IJXnU8CNik001PBsM04yezeCS%2B0pETxgMIupFPsrxTbmD1oepOHhERcPL4Byk1qKkm6TtFvfXm74lB8Pui6rdjg%2B8IwVmrenuF4Ph3LD4ZnDeuNW3YO4dDbN5Q4%2F89FIjEkeGKeLLar10vtkiy8GweKEe8cuja3717pxNrVTOi8ckfBHwomdUD8Xw1IE6M1qHI4u6pOMtxqpKQPu%2FZzsAgrME854P7NQqtGaZRI3eqZlBRVyG2FYrR7KFC6QtA%2FdVCYBxBWG4JdxZhXmbM%2Fc%2Bn%2B04WEKPpbhH12qa7URkjktnYMsJNcVF7rtYtn1D6gCyPnuXrwe7qcV0MgnrfuqmW4FoGsGrjhFdp7Eebe40wh78VaLxxAxO9hR%2BrYRDgNjvtewICpUbzYQUm6jzVk3i%2FYjt5Pmr9HesI1zvaI80Jmpgud1snf1z7VWoIqnAXwIZyLlo%2BxyFZs4qDUBgFr9tqrgbnGjBgTzdyJTItq7yFMVJDCt6dy5LjnMgKSMd%2BjjsoDBjssytWMM4ulzlyQHtn4IdVgCe4q4jgLQrHXf4ZucbUIA6q%2Fxgg7favSO%2FZaivTQq%2BoaQQKJ1NXxPiMXw6j354mdaEtz8jK549xaCEZi2OiF3l8Qrzc%2B7JikRXQ8wlX1gh8SbiNHfo6ZcE%3D 023:5615 SL7 srpm libssh2-0:1.8.0-4.el7_9.1.src i386 libssh2-0:1.8.0-4.el7_9.1.i686 x86_64 libssh2-0:1.8.0-4.el7_9.1.x86_64 noarch libssh2-docs-0:1.8.0- 4.el7_9.1.noarch - Scientific Linux Development Team |
OS: Fedora
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc45 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compromised certificates Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc45 |
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619 |
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc44 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compromised certificates |
Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486. |
OS: Slackware
New kernel packages are available for Slackware 15.0 to fix security issues. |
New php packages are available for Slackware 15.0 and -current to fix security issues. |
New python-certifi packages are available for Slackware 15.0 and -current to fix a security issue. |
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. |
OS: Debian
Multiple security issues were discovered in libheif, a library for reading and writing HEIF and AVIF images. Processing specially crafted images could result in denial of service through excessive resource consumption or crashes, or disclosure of process memory. A use-after-free and double-free affecting timestamp handling during image encoding, including |
A vulnerability was discovered in Brotli, a generic-purpose lossless compression suite, which could result in denial of service, or potentially the execution of arbitrary code. For the stable distribution (trixie), this problem has been fixed in version 1.1.0-2+deb13u1. |
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured island trust anchor underneath an insecure parent from an attacker-controlled NSEC record. |
Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the HTTP client and server, SSH, TLS, |
OS: Debian LTS
It was discovered that an incorrect implementation of message filtering in xdg-dbus-proxy, a filtering proxy for D-Bus connections, allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. |
A vulnerability was discovered in Brotli, a generic-purpose lossless compression suite, which could result in denial of service, or potentially the execution of arbitrary code. For Debian 12 bookworm, this problem has been fixed in version 1.0.9-2+deb12u1. |
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 bookworm, these problems have been fixed in version 156.0.8078.47-1~deb12u1. |
OS: Ubuntu
zlib could be made to crash or run programs if it received specially crafted input. |
OpenVPN could allow unintended access to network services. |
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic. |
Several security issues were fixed in libsoup. |
NIST Vulnerability Database
CVEMAP.ORG: Vulnerabilities & Exposures
OS: Arch
The package php-legacy before version 8.3.36-1 is vulnerable to arbitrary code execution. |
The package php before version 8.5.12-1 is vulnerable to arbitrary code execution. |
The package python-django before version 5.1.11-1 is vulnerable to content spoofing. |
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution. |
Exploit-DB.com
OS: Mageia
Security update |
Security update |
Security update |
NIST Vulnerability Database
OS: Gentoo
Multiple vulnerabilities have been found in PHP, the worst of which could result in remote code execution. |
A vulnerability has been discovered in ca-certificates where an intermediate Certificate Authority has been compromised. |
A vulnerability has been discovered in Ruby, possibly allowing remote code execution. |
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. |