Aggregator | Linuxlookup

Yuqi Qiu and Xiang Li discovered that Unbound did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-81642) Ben Morris discovered that Unbound did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitary code. (CVE-2026-82717)

DSA-6546-1 rails - security update

Debian Security Advisories

2 days 11 hours ago

https://security-tracker.debian.org/tracker/DSA-6546-1

DSA-6547-1 ruby-jwt - security update

Debian Security Advisories

2 days 11 hours ago

https://security-tracker.debian.org/tracker/DSA-6547-1

DSA-6548-1 node-shell-quote - security update

Debian Security Advisories

2 days 11 hours ago

https://security-tracker.debian.org/tracker/DSA-6548-1

DSA-6545-1 roundcube - security update

Debian Security Advisories

2 days 11 hours ago

https://security-tracker.debian.org/tracker/DSA-6545-1

USN-8872-1: libxmltok vulnerabilities

Ubuntu Security Advisories

2 days 15 hours ago

It was discovered that Expat, contained with the xmltok library did not correctly handle certain integer arithmetic. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly cause a denial of service. (CVE-2026-56404, CVE-2026-56405)

flocq-4.2.2-3.fc44 gappalib-coq-1.11.0-1.fc44 rocq-9.3.0-1.fc44 rocq-stdlib-9.2.0-1.fc44 why3-1.8.2-11.fc44 zenon-0.8.5-41.fc44

Fedora Security Advisories

2 days 16 hours ago

FEDORA-2026-62bbabcf11 Packages in this update:

flocq-4.2.2-3.fc44
gappalib-coq-1.11.0-1.fc44
rocq-9.3.0-1.fc44
rocq-stdlib-9.2.0-1.fc44
why3-1.8.2-11.fc44
zenon-0.8.5-41.fc44

Update description:

See https://rocq-prover.org/doc/v9.3/refman/changes.html#version-9-3 for changes in rocq 9.3.0.

See https://rocq-prover.org/doc/v9.2/refman-stdlib/changes.html for changes in rocq-stdlib 9.2.0.

See https://gitlab.inria.fr/gappa/coq/-/blob/master/NEWS.md for changes in gappalib-coq 1.11.0.

The other builds are rebuilds due to the above changes.

python-jupytext-1.19.6-1.fc43

Fedora Security Advisories

2 days 19 hours ago

FEDORA-2026-3942ab86fd Packages in this update:

python-jupytext-1.19.6-1.fc43

Update description:

See https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md for changes in versions 1.19.5 and 1.19.6. For this update, a patch has been applied that reverses the jupyterlab → jupyter-builder change for Fedora releases ≤ 45, since jupyter-builder is only available in F46 and later. Many CVEs have been fixed in this release.

USN-8870-1: OpenStack Aodh and Watcher vulnerability

Ubuntu Security Advisories

3 days ago

Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and that the OpenStack Watcher webhook trigger endpoint did not apply authorization. An attacker could possibly use this issue to access sensitive alarm metadata or trigger unauthorized action plans.

USN-8871-1: Linux kernel (Raspberry Pi) vulnerabilities

Ubuntu Security Advisories

3 days ago

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - exFAT file system; - Network file system (NFS) client; - Network file system (NFS) server daemon; - B.A.T.M.A.N. meshing protocol; - IPv4 networking; - IPv6 networking; - Netfilter; - RDS protocol; (CVE-2026-53131, CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)

USN-8851-3: Linux kernel (Azure) vulnerabilities

Ubuntu Security Advisories

3 days ago

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)

aegisub-3.5.0-1.fc43

Fedora Security Advisories

3 days ago

FEDORA-2026-78a11da997 Packages in this update:

aegisub-3.5.0-1.fc43

Update description:

Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script references. The fix requires confirmation before loading associated scripts, makes extension validation consistent with filesystem path interpretation, and sanitizes embedded NUL characters in project metadata. Upstream advisory: https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23