← All tracked CVEs
Updated 14:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | dhcpcd ≤10.3.2 IPv6 RA route info memory leak enables unauthenticated same-link DoS crash | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | Medium | dhcpcd ≤10.3.2 DHCPv6 RENEW PD_EXCLUDE use-after-free enables unauthenticated same-link crash | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | Stack overflow in libsass 3.6.5-8-g210218 Sass::CompoundSelector::has_real_parent_ref causing DoS; affects sassc 3.6.2 | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | Email change confirmation bug lets attackers hijack RubyGems.org accounts and publish/yank gems | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | Medium | Zstandard <1.4.1 output files default permissions until completion, allowing unintended access | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | Zstandard <1.3.8 one-pass compression race condition allows out-of-bounds write with undersized output buffer | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | libplist plist_free_data crash via integer node misclassified as PLIST_KEY causing invalid free | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | libplist DoS via zero offset size causing large memory allocation and crash | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | Medium | libplist bplist.c parse_dict_node out-of-bounds heap read causes DoS crash via crafted file | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | High | ClamAV libclamav remote DoS via crafted document causing AMP restart on Cisco ESA/WSA | secure-packages-rolling | Oct 4, 2026 | |
| Fixed | Medium | libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks, causing use-after-free vulnerability | secure-packages-25.11 | Oct 3, 2026 | |
| Fixed | High | Expat XML parser <=2.8.3 remote unauthenticated DoS via quadratic storeAtts() attribute processing | secure-packages-25.11 | Oct 3, 2026 | |
| Fixed | Medium | libxml2 XInclude fails to propagate parseFlags pre-2.15.4, bypassing XML_PARSE_NONET and enabling XXE/SSRF/DoS | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Medium | libxml2 xmlIO before 2.15.4 passes negative write lengths due to integer overflow | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Medium | libxml2 <2.15.4: heap-based buffer overflow in xmlXPtrEvalXPtrPart via xpointer length saturation | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Low | libxml2 <2.15.4: xmlregexp NULL dereference in xmlRegNewParserCtxt after strdup failure | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | High | libxml2 <2.15.4 xmlSnprintfElements stack-based buffer overflow via strcat in valid.c | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Medium | Integer overflow in libxml2 xmlURIEscapeStr (uri.c) before 2.15.4 | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Medium | libxml2 <2.15.4: xmlDictAddQString integer overflow and heap buffer overflow in dict.c | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Low | libxml2 pre-2.15.4 out-of-bounds read in xmlregexp NXT macro via xmlFAParsePosCharGroup | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | High | strongSwan 5.1.3–6.0.7: infinite loop in x509 attribute certificate parser (ietfAttrSyntax) | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Low | strongSwan 4.2.0–6.0.7: Memory leak in x509 attribute certificate parser | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | High | GNU Bison: %define tool.xsltproc allows arbitrary program execution during --html | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | Medium | dhcpcd <=10.3.2 stack OOB write via RFC6603 OPTION_PD_EXCLUDE in dhcp6_makemessage | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | High | cpio 2007.05.10 and 2010.07.28 allow remote arbitrary file overwrite via RPM package symlink | secure-packages-rolling | Oct 3, 2026 | |
| Fixed | High | PCRE2 <10.48: pcre2_jit_match incorrectly frees copied subject from context | secure-packages-26.05 | Oct 2, 2026 | |
| Fixed | Medium | Unbound ≤1.26.0 vulnerable to DNSSEC ReTrap algorithmic complexity DoS (Tag/Delegation/NSEC/Additional) | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | Unbound DoH libnghttp2 use-after-free causes session DoS in 1.12.0–1.26.0 | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Critical | Unbound ≤1.26.0 heap overflow via CNAME TTL rewrite/compression pointer; crash/RCE risk | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Critical | Unbound <=1.26.0 DNSSEC DNSKEY compression pointer overflow allows DoS and possible RCE | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | High | Unbound ≤1.26.0 heap buffer overflow in RRSet canonicalization via 255-byte qname TCP response | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | NLnetLabs Unbound <=1.26.0 DoT/TCP read loop lacks limits; attacker monopolizes worker event loop causing DoS | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | Unbound 1.22.0–1.26.1 DoQ RESET_STREAM retransmission use-after-free with libngtcp2 crashes server | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | Tampered zone data served/written before ZONEMD check below trust anchor in Unbound 1.13.2–1.26.1 | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Low | Unbound 1.20–1.26 serve-expired double-decrements wait-limit, bypassing CVE-2024-33655; enables DoS | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | gst-plugins-good avidemux vprp parsing miscalculation causes out-of-bounds reads and crash | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | nghttpx ≤1.69.0 forwards Upgrade+Content-Length on keep-alive backends; smuggling and response-queue poisoning | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | ovpn-dco-win 2.0.0-2.8.3 epoch key buffer miscalc enables authenticated remote kernel heap overflow, DoS | secure-packages-rolling | Oct 1, 2026 | |
| Fixed | Medium | PYSEC-2026-3927: Apache Thrift Python: certificate host mismatch validation vulnerability before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | PYSEC-2026-3926: Infinite loop vulnerability in Apache Thrift bindings prior to 0.24.0 (Python/Go/PHP/Java) | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | PYSEC-2026-3925: Data amplification via compressed data in Apache Thrift Python bindings before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | GHSA-hwrj-9rr4-24xh: Apache Thrift Python bindings host mismatch certificate validation vulnerability before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | GHSA-8wv5-x4w7-5gww: Infinite loop vulnerability in Apache Thrift Python, Go, PHP, and Java bindings prior to 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | GHSA-6pjx-3pjc-mrj8: Data amplification vulnerability in Apache Thrift Python bindings prior to 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Improper certificate host mismatch validation in Apache Thrift Python before 0.24.0, replaces CVE-2026-41603 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Apache Thrift C++ bindings: Improper input quantity validation causes out-of-bounds read (pre-0.24.0) | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Unbounded resource allocation vulnerability in Apache Thrift Rust bindings before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Out-of-bounds read vulnerability in Apache Thrift c_glib before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Heap-based buffer overflow in Apache Thrift C++ bindings before v0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Buffer over-read vulnerability in Apache Thrift C++ bindings before version 0.24.0 | secure-packages-26.05 | Sep 30, 2026 |