OS: Debian
Several vulnerabilities were discovered in libspreadsheet-xlsx-perl. a Perl module for reading MS Excel 2007 files, which could result in denial of service or potentially the execution of arbitrary code if specially crafted documents are processed. For the stable distribution (trixie), this problem has been fixed in |
Several vulnerabilities have been discovered in c-ares, an asynchronous DNS resolver library, which may result in denial of service, DNS spoofing, or information disclosure, depending on how the library is used. These flaws include memory corruption issues (use-after-free, double-free, and buffer overflows), excessive resource consumption during DNS message |
Multiple security issues were discovered in PostgreSQL, which may result in execution of arbitrary code, incorrect authentication, information disclosure, denial of service or privilege escalation. To completely fix CVE-2026-6460 some extensions will require re-compilation against this released version, which will be scheduled |
It was discovered that Sympa, a mailing list manager, is prone to a path traversal and an unauthorized access bypass, which could result in access to deleted or raw archive files. For the stable distribution (trixie), this problem has been fixed in version 6.2.76~dfsg-1+deb13u1. |
OS: Fedora
Update to version 2.0.42 Fixes CVE-2026-119618 |
Update the crypto-bigint crate to version 0.7.10. Update the ctutils crate to version 0.4.8. Update the elliptic-curve crate to version 0.14.3. Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4. |
Update to 6.1.0 for CVE-2026-78123, CVE-2026-78124, CVE-2026-78126, CVE-2026-78127, CVE-2026-78129, CVE-2026-78130, CVE-2026-78131, CVE-2026-78132, CVE-2026-78133, CVE-2026-78134 and CVE-2026-78135 |
Update the crypto-bigint crate to version 0.7.10. Update the ctutils crate to version 0.4.8. Update the elliptic-curve crate to version 0.14.3. Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4. |
OS: OpenSuse
An update that solves two vulnerabilities can now be installed. |
An update that solves 81 vulnerabilities can now be installed. |
An update that solves one vulnerability can now be installed. |
An update that solves 4 vulnerabilities can now be installed. |
OS: Redhat
Red Hat released a security update for libvpx in RHEL 8.6, fixing critical vulnerabilities including a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for BIND in RHEL 8.2, addressing a critical vulnerability (CVE-2023-3341) that may lead to DoS due to stack exhaustion. |
Red Hat released an important security update for libvpx in Red Hat Enterprise Linux 9, addressing a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for libvpx in RHEL 8.2 addressing important vulnerabilities, including a heap buffer overflow and a crash related to VP9 encoding. |
NIST Vulnerability Database
OS: Ubuntu
Several security issues were fixed in the Linux kernel. |
Several security issues were fixed in the Linux kernel. |
x11vnc could be made to expose sensitive information to local users. |
TigerVNC could be made to expose sensitive information over the network. |
OS: Slackware
New httpd packages are available for Slackware 15.0 and -current to fix security issues. |
New git packages are available for Slackware 15.0 and -current to fix security issues. |
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. |
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. |
OS: Gentoo
Multiple vulnerabilities have been found in curl, the worst of which could result in arbitrary code execution. |
Multiple vulnerabilities have been found in PCRE2, the worst of which could result in arbitrary code execution. |
Multiple vulnerabilities have been found in ImageMagick, the worst of which could result in arbitrary code execution. |
Multiple vulnerabilities have been found in libheif, the worst of which could result in arbitrary code execution. |
OS: Scientific
python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6885 SL7 srpm python-0:2.7.5-94.el7_9.src x86_64 python-0:2.7.5-94.el7_9.x86_64 i386 python-libs-0:2.7.5-94.el7_9.i686 - Scientific Linux Development Team |
plexus-archiver: Arbitrary File Creation in AbstractUnArchiver (CVE-2023-37460) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6886 SL7 srpm plexus-archiver-0:2.4.2-6.el7_9.src noarch plexus-archiver-0:2.4.2-6.el7_9.noarch - Scientific Linux Development Team |
bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5691 SL7 srpm bind-32:9.11.4-26.P2.el7_9.15.src i386 bind-export-libs-32:9.11.4-26.P2.el7_9.15.i686 x86_64 bind-export-libs-32:9.11.4-26.P2.el7_9.15.x86_64 noarch bind-license-32:9.11.4-26.P2.el7_9.15.noarch - Scie [More...] |
libssh2: use-of-uninitialized-value in _libssh2_transport_read (CVE-2020-22218) --- This content is derived from https://sso.redhat.com/auth/realms/redhat-external/protocol/saml?SAMLRequest=fZJBT8MwDIX%2FSm85ZWk7yrZonVQxIU0ChDbgwAVlqccipUmJXTb49aQbg3Hh6jy%2F79nOFFVjW1l1tHVLeOsAKakQIZDx7so77BoIKwjvRsPj8qZkW6IWpRBKa0AcBKi3igbaN6L2O2e9qlH0nmJjnLLmE1hSEQWz7giOfsa9fhsuXA37kmUsmUdu1PfQXwSiP%2FdXMaMIoGyD4ljmsCcIESPa4Mlrbw9olizmJXvJ9WgMWmV8qMcTfpGNUq7WxZCvVTEe5dmoUJebKEXsYhAk5ahkeZoXPL3g6eQhHcqikGn2zJInCHhIlg9Sluwb61D2oJJ1wUmv0KB0qgGUpOWqur2RUSjVaY3nLe3%2FPac52Gzaq%2BUhXZh1zmwM1PxnxVNx%2Fjw9HvEu2i3m994a%2FZFU1vrdVVwXQckodPEO1z40iv4P0FdMzTcHqWz7wZHAEROzI%2FPvX5l9AQ%3D%3D&RelayState=https%3A%2F%2Faccess.redhat.com%2Ferrata%2FRHSA-2&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=BrJPc%2FvdbvszAnFEmxMHTWhWO5IJXnU8CNik001PBsM04yezeCS%2B0pETxgMIupFPsrxTbmD1oepOHhERcPL4Byk1qKkm6TtFvfXm74lB8Pui6rdjg%2B8IwVmrenuF4Ph3LD4ZnDeuNW3YO4dDbN5Q4%2F89FIjEkeGKeLLar10vtkiy8GweKEe8cuja3717pxNrVTOi8ckfBHwomdUD8Xw1IE6M1qHI4u6pOMtxqpKQPu%2FZzsAgrME854P7NQqtGaZRI3eqZlBRVyG2FYrR7KFC6QtA%2FdVCYBxBWG4JdxZhXmbM%2Fc%2Bn%2B04WEKPpbhH12qa7URkjktnYMsJNcVF7rtYtn1D6gCyPnuXrwe7qcV0MgnrfuqmW4FoGsGrjhFdp7Eebe40wh78VaLxxAxO9hR%2BrYRDgNjvtewICpUbzYQUm6jzVk3i%2FYjt5Pmr9HesI1zvaI80Jmpgud1snf1z7VWoIqnAXwIZyLlo%2BxyFZs4qDUBgFr9tqrgbnGjBgTzdyJTItq7yFMVJDCt6dy5LjnMgKSMd%2BjjsoDBjssytWMM4ulzlyQHtn4IdVgCe4q4jgLQrHXf4ZucbUIA6q%2Fxgg7favSO%2FZaivTQq%2BoaQQKJ1NXxPiMXw6j354mdaEtz8jK549xaCEZi2OiF3l8Qrzc%2B7JikRXQ8wlX1gh8SbiNHfo6ZcE%3D 023:5615 SL7 srpm libssh2-0:1.8.0-4.el7_9.1.src i386 libssh2-0:1.8.0-4.el7_9.1.i686 x86_64 libssh2-0:1.8.0-4.el7_9.1.x86_64 noarch libssh2-docs-0:1.8.0- 4.el7_9.1.noarch - Scientific Linux Development Team |
OS: Debian LTS
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 12 bookworm, these problems have been fixed in version 6.12.115-2~deb12u1. This update additionally includes many more bug |
Two vulnerabilities were discovered in Django, the popular Python-based web development framework: CVE-2026-108147 Prevent a potential memory exhaustion in MultiPartParser via base64-encoded file uploads. When using django.http.multipartparser's |
node-shell-quote quotes and parses shell commands for Node.js programs. An attacker who can supply the text a program quotes after a comment can run a shell command. An attacker who can supply the text a program parses can stall that program. |
Multiple vulnerabilities were discovered in nova, a cloud computing fabric controller, which could result in denial of service. For Debian 12 bookworm, this problem has been fixed in version 2:26.2.2-1~deb12u5. We recommend that you upgrade your nova packages. |
Exploit-DB.com
OS: Suse
An update that solves 46 vulnerabilities and has five fixes can now be installed. |
An update that solves 147 vulnerabilities can now be installed. |
An update that solves one vulnerability can now be installed. |
An update that solves seven vulnerabilities and has five fixes can now be installed. |
OS: Arch
The package php-legacy before version 8.3.36-1 is vulnerable to arbitrary code execution. |
The package php before version 8.5.12-1 is vulnerable to arbitrary code execution. |
The package python-django before version 5.1.11-1 is vulnerable to content spoofing. |
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution. |
OS: Mageia
Security update |
Security update |
Security update |
NIST Vulnerability Database
CVEMAP.ORG: Vulnerabilities & Exposures
OS: CentOS
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1498 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1486 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1249 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:0957 |
OS: Rocky
Important: glib-networking security update |
Important: sos security, bug fix, and enhancement update |
Moderate: environment-modules security update |
Important: jq security update |