PatchFirst · Свежие уязвимости
За последние 30 дней в Операционные системы опубликовано уязвимостей: 6531; в каталоге KEV: 4.
Уязвимостей: 160273
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: tcp: restrict SO_ATTACH_FILTER to priv users (CVE-2026-53236) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (CVE-2026-64378) * kernel: net: gro: fix double aggregation of flush-marked skbs (CVE-2026-68136) * kernel: net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338) * kernel: net/iucv: fix use-after-free of a severed
These are all security issues fixed in the vifm-0.14.5-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the trivy-0.76.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the timoni-0.36.0-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the sdbootutil-1+git20261026.4e266f0-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the python313-uv-0.13.6-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the python313-pypdf-6.21.2-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the python313-Brotli-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the prometheus-ha_cluster_exporter-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the pinact-5.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the patch-2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the libyang-devel-3.13.6-4.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kumactl-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kubeseal-0.41.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kubelogin-0.2.22-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kubectl-retina-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the krb5-1.22.2-5.1 package on the GA media of openSUSE Tumbleweed.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.