PT-2026-76413

These are all security issues fixed in the java-1 8 0-openj9-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-68336: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconfall NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the devconfall is never initialized because inet6init exits before addrconfinit is called which initializes it...

[SECURITY] [DSA 6422-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6422-1 [email protected] https://www.debian.org/security/ Andres Salomon August 08, 2026 https://www.debian.org/security/faq -...

[SECURITY] Fedora 44 Update: mingw-glib2-2.88.3-1.fc44

MinGW Windows Glib2 library...

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-3149)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by...

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-3095)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by...

[SECURITY] [DSA 6417-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6417-1 [email protected] https://www.debian.org/security/ Aron Xu August 08, 2026 https://www.debian.org/security/faq -...

DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

OESA-2026-3308 librabbitmq security update

This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1. Security Fixes: CVE-2026-59986 is a security vulnerability affecting the librabbitmq library. Specific details of the vulnerability have not been disclosed. librabbitmq is the C client library for...

[SECURITY] Fedora 43 Update: libXfont2-2.0.9-1.fc43

X.Org X11 libXfont2 runtime library...

[SECURITY] Fedora 44 Update: gst-devtools-1.28.6-1.fc44

Development and debugging tools for GStreamer...

PT-2026-69077

Name of the Vulnerable Software and Affected Versions absinthe federation versions 0.1.0 through 0.9.2 Description An unauthenticated remote attacker can cause the Erlang VM to abort by sending crafted representation keys within the entities field. The convert key/2 function in...

PT-2026-76899

This update for openssl-1 1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...

PT-2026-76898

This update for openssl-1 1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...

POKEx: Performance Analysis of POKE-Key Exchange and SIDH-Variants

In this paper, we present a comparative performance analysis of the POKE-based key exchange and SIDH variants. SIDH gained attention for its small key size and efficient performance, and has been selected as an alternate candidate in NIST PQC Round 4. However, following the key recovery attack by...

CVE-2026-67585: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

SUSE-SU-2026:23127-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...

TencentOS Server 3: grafana (TSSA-2026:0805)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0805 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-76547

This update for openssl-1 1 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

PT-2026-68626

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An unauthenticated remote attacker can cause server CPU exhaustion by providing a long CSS declaration within sanitized HTML. The issue resides in the HtmlSanitizeEx.Scrubber.CSS.scrub/...