CVEMAP.ORG: Vulnerabilities & Exposures
OS: Debian LTS
Several vulnerabilities have been found in the ClamAV antivirus toolkit, which could result in denial of service or possibly other unspecified impact when processing maliciously crafted files. For Debian 12 bookworm, these problems have been fixed in version 1.4.6+dfsg-0+deb12u1. |
Two vulnerabilities were discovered in aide, an advanced intrusion detection system, which could allow a local user to bypass the detection of malicious files. For Debian 12 bookworm, this problem has been fixed in version 0.18.3-1+deb12u5. |
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 12 bookworm, these problems have been fixed in version 6.12.113-1~deb12u1. This update additionally includes many more bug |
Multiple vulnerabilities have been found in expat. CVE-2025-59375 The patchset previously uploaded in DLA-4807-1 did not fully address the issue since a major part of it was conditionally included only when XML_GE was enabled. This upload enables that define. |
OS: Suse
An update that solves six vulnerabilities can now be installed. |
An update that solves five vulnerabilities can now be installed. |
An update that solves three vulnerabilities can now be installed. |
An update that solves two vulnerabilities can now be installed. |
Exploit-DB.com
OS: OpenSuse
An update that solves three vulnerabilities can now be installed. |
An update that can now be installed. |
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed. |
An update that solves seven vulnerabilities can now be installed. |
OS: CentOS
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1498 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1486 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1249 |
Upstream details at : https://access.redhat.com/errata/RHSA-2024:0957 |
NIST Vulnerability Database
OS: Redhat
Red Hat released a security update for libvpx in RHEL 8.6, fixing critical vulnerabilities including a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for BIND in RHEL 8.2, addressing a critical vulnerability (CVE-2023-3341) that may lead to DoS due to stack exhaustion. |
Red Hat released an important security update for libvpx in Red Hat Enterprise Linux 9, addressing a heap buffer overflow and a crash related to VP9 encoding. |
Red Hat released a security update for libvpx in RHEL 8.2 addressing important vulnerabilities, including a heap buffer overflow and a crash related to VP9 encoding. |
NIST Vulnerability Database
OS: Gentoo
Multiple vulnerabilities have been found in PHP, the worst of which could result in remote code execution. |
A vulnerability has been discovered in ca-certificates where an intermediate Certificate Authority has been compromised. |
A vulnerability has been discovered in Ruby, possibly allowing remote code execution. |
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. |
OS: Arch
The package php-legacy before version 8.3.36-1 is vulnerable to arbitrary code execution. |
The package php before version 8.5.12-1 is vulnerable to arbitrary code execution. |
The package python-django before version 5.1.11-1 is vulnerable to content spoofing. |
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution. |
OS: Scientific
python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6885 SL7 srpm python-0:2.7.5-94.el7_9.src x86_64 python-0:2.7.5-94.el7_9.x86_64 i386 python-libs-0:2.7.5-94.el7_9.i686 - Scientific Linux Development Team |
plexus-archiver: Arbitrary File Creation in AbstractUnArchiver (CVE-2023-37460) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6886 SL7 srpm plexus-archiver-0:2.4.2-6.el7_9.src noarch plexus-archiver-0:2.4.2-6.el7_9.noarch - Scientific Linux Development Team |
bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5691 SL7 srpm bind-32:9.11.4-26.P2.el7_9.15.src i386 bind-export-libs-32:9.11.4-26.P2.el7_9.15.i686 x86_64 bind-export-libs-32:9.11.4-26.P2.el7_9.15.x86_64 noarch bind-license-32:9.11.4-26.P2.el7_9.15.noarch - Scie [More...] |
libssh2: use-of-uninitialized-value in _libssh2_transport_read (CVE-2020-22218) --- This content is derived from https://sso.redhat.com/auth/realms/redhat-external/protocol/saml?SAMLRequest=fZJBT8MwDIX%2FSm85ZWk7yrZonVQxIU0ChDbgwAVlqccipUmJXTb49aQbg3Hh6jy%2F79nOFFVjW1l1tHVLeOsAKakQIZDx7so77BoIKwjvRsPj8qZkW6IWpRBKa0AcBKi3igbaN6L2O2e9qlH0nmJjnLLmE1hSEQWz7giOfsa9fhsuXA37kmUsmUdu1PfQXwSiP%2FdXMaMIoGyD4ljmsCcIESPa4Mlrbw9olizmJXvJ9WgMWmV8qMcTfpGNUq7WxZCvVTEe5dmoUJebKEXsYhAk5ahkeZoXPL3g6eQhHcqikGn2zJInCHhIlg9Sluwb61D2oJJ1wUmv0KB0qgGUpOWqur2RUSjVaY3nLe3%2FPac52Gzaq%2BUhXZh1zmwM1PxnxVNx%2Fjw9HvEu2i3m994a%2FZFU1vrdVVwXQckodPEO1z40iv4P0FdMzTcHqWz7wZHAEROzI%2FPvX5l9AQ%3D%3D&RelayState=https%3A%2F%2Faccess.redhat.com%2Ferrata%2FRHSA-2&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=BrJPc%2FvdbvszAnFEmxMHTWhWO5IJXnU8CNik001PBsM04yezeCS%2B0pETxgMIupFPsrxTbmD1oepOHhERcPL4Byk1qKkm6TtFvfXm74lB8Pui6rdjg%2B8IwVmrenuF4Ph3LD4ZnDeuNW3YO4dDbN5Q4%2F89FIjEkeGKeLLar10vtkiy8GweKEe8cuja3717pxNrVTOi8ckfBHwomdUD8Xw1IE6M1qHI4u6pOMtxqpKQPu%2FZzsAgrME854P7NQqtGaZRI3eqZlBRVyG2FYrR7KFC6QtA%2FdVCYBxBWG4JdxZhXmbM%2Fc%2Bn%2B04WEKPpbhH12qa7URkjktnYMsJNcVF7rtYtn1D6gCyPnuXrwe7qcV0MgnrfuqmW4FoGsGrjhFdp7Eebe40wh78VaLxxAxO9hR%2BrYRDgNjvtewICpUbzYQUm6jzVk3i%2FYjt5Pmr9HesI1zvaI80Jmpgud1snf1z7VWoIqnAXwIZyLlo%2BxyFZs4qDUBgFr9tqrgbnGjBgTzdyJTItq7yFMVJDCt6dy5LjnMgKSMd%2BjjsoDBjssytWMM4ulzlyQHtn4IdVgCe4q4jgLQrHXf4ZucbUIA6q%2Fxgg7favSO%2FZaivTQq%2BoaQQKJ1NXxPiMXw6j354mdaEtz8jK549xaCEZi2OiF3l8Qrzc%2B7JikRXQ8wlX1gh8SbiNHfo6ZcE%3D 023:5615 SL7 srpm libssh2-0:1.8.0-4.el7_9.1.src i386 libssh2-0:1.8.0-4.el7_9.1.i686 x86_64 libssh2-0:1.8.0-4.el7_9.1.x86_64 noarch libssh2-docs-0:1.8.0- 4.el7_9.1.noarch - Scientific Linux Development Team |
OS: Ubuntu
zlib could be made to crash or run programs if it received specially crafted input. |
OpenVPN could allow unintended access to network services. |
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic. |
Several security issues were fixed in libsoup. |
OS: Debian
Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the HTTP client and server, SSH, TLS, |
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in IMAP command injection, cross-site scripting, SSRF bypass, email header injection, css property injection, remote content blocking bypass, information disclosure or privilege escalation. |
Two vulnerabilities were discovered in aide, an advanced intrusion detection system, which could allow a local user to bypass the detection of malicious files. For the stable distribution (trixie), these problems have been fixed in version 0.19.1-2+deb13u5. |
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 156.0.8078.47-1~deb13u1. |
OS: Rocky
Critical: ca-certificates security update |
Important: expat security update |
Critical: grafana-pcp security update |
Important: qemu-kvm security, bug fix, and enhancement update |
OS: Mageia
Security update |
Security update |
Security update |
OS: Slackware
New kernel packages are available for Slackware 15.0 to fix security issues. |
New php packages are available for Slackware 15.0 and -current to fix security issues. |
New python-certifi packages are available for Slackware 15.0 and -current to fix a security issue. |
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. |
OS: Fedora
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc45 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compromised certificates Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc45 |
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619 |
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc44 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compromised certificates |
Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486. |