SUSE-SU-2026:23857-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

CVE-2026-12611

A flaw was found in Jetty. A remote attacker can exploit a race condition in the server's handling of HTTP/2 RSTSTREAM and GOAWAY frames. This can lead to blocking writes that are never unblocked, causing all server threads to become unresponsive. The primary impact is a Denial of Service DoS for...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

SUSE-SU-2026:4274-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

SUSE-SU-2026:4273-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

Oracle Linux 10 : tomcat (ELSA-2026-69259)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69259 advisory. - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192648 tomcat: Improper Input Validation...

Linux Distros Unpatched Vulnerability : CVE-2026-93567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNE...

CVE-2026-73550: Missing Release of Memory after Effective Lifetime

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...

PT-2026-96115

Name of the Vulnerable Software and Affected Versions fetchmail versions 5.0.8 through 6.6.6 Description A stack-based buffer overflow occurs in fetchmail when it is compiled with NTLM support. A malicious or compromised mail server that advertises NTLM authentication can send a specially crafted...

CVE-2026-94184: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

Linux Distros Unpatched Vulnerability : CVE-2026-93492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This...

Oracle Linux 9 : sudo (ELSA-2026-69123)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69123 advisory. 1.9.17p2-3.1 - CVE-2026-82474 sudo: execveat2 intercept/logsubcmds bypass Resolves: RHEL-255647 Tenable has extracted the preceding description block directly...

CVE-2026-73513: Improper Input Validation

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without ENDSTREAM. Envoy completes and deferred-deletes the ActiveRequest...

TencentOS Server 2: python-tornado (TSSA-2026:1040)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1040 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 2: freerdp (TSSA-2026:1042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 2: gdk-pixbuf2 (TSSA-2026:1038)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1038 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2026-73548: Inconsistent Interpretation of HTTP Requests

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete...

TencentOS Server 2: bind (TSSA-2026:1039)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1039 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...