Threat database

A heap-based buffer overflow vulnerability (CVE-2026-84268) exists in the SFTP backend of gvfs. This flaw occurs when a malicious SFTP server sends a length value exceeding the allocated buffer size during file read operations, causing memory corruption. The issue can lead to denial of service or potentially arbitrary code execution in the gvfsd-sftp process. Red Hat has released security updates for Red Hat Enterprise Linux 8 and 10 to address this vulnerability.

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View belonging to another organization by supplying its identifier to the affected API endpoint. This can result in unauthorized disclosure of Content View lifecycle information, including publication and promotion events, associated users, and timestamps.

aria2 versions up to and including 1.37.0 contain a stack buffer underflow vulnerability in the IOFile::getLine() function when processing lines that start with a NUL byte. This vulnerability is tracked as CVE-2026-75421. The issue can cause application instability but does not impact confidentiality or integrity. A security update addressing this vulnerability has been released.

SiYuan versions before v3.7.4 have an information disclosure vulnerability in the /api/block/getRefIDs endpoint. This endpoint does not properly enforce password protection tiers, allowing unauthenticated users to discover references to specific blocks within password-protected documents without needing the document password. The advisory is a duplicate and has been withdrawn in favor of GHSA-vg99-7gj7-2fr5.

A missing authorization vulnerability exists in SiYuan's development branch in the /api/av/getAttributeViewSearchTarget endpoint. This endpoint allows anonymous users to retrieve database row content without proper publish-access checks. The issue was introduced in a commit not present in stable versions and was patched in version 3.7.4. No stable released version is affected.

A protection mechanism failure exists in some Intel oneCCL Bindings for PyTorch before version 2.8.0, allowing a local privileged user combined with an unprivileged adversary to potentially escalate privileges. The vulnerability requires low complexity and passive user interaction but local access. It impacts confidentiality, integrity, and availability with a medium severity score of 6.7. No patch status is confirmed from the provided data.

Multiple vulnerabilities in tesseract-ocr prior to version 5.5.3 allow crafted .traineddata models loaded via TessBaseAPI::Init to cause heap out-of-bounds reads and writes, stack buffer overflow, and denial of service through empty-stack dereference. These flaws lead to memory corruption or crashes. The issues are resolved by updating to tesseract-ocr version 5.5.3.

A security vulnerability (CVE-2024-5651) in the Fence Agents Remediation Operator used by Red Hat OpenShift Workload Availability 1 for RHEL 8 allows remote code execution via command line options in the fence-agent component. Red Hat has released version 0.4.1 of the operator to address this issue. The operator fences unhealthy nodes and evicts workloads as part of remediation. The update is rated as important by Red Hat Product Security.