Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: es58xrxerrmsg – fixed a memory leak in the error handling path. In es58xrxerrmsg, if can-dosetmode fails, the function directly returns without calling netifrxskb. This means that the skb allocated by alloccanerrs...

Wireshark Analyzer 4.6.6

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

MAL-2026-3875 Malicious code in @antv/dw-analyzer (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Malicious code in @antv/dw-analyzer (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

The vulnerability of the iLBC audio codec used by Wireshark, a network traffic analyzer for computers, allows a hacker to cause a service failure.

The vulnerability of the iLBC audio codec used by Wireshark, a network traffic analyzer, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the AMR-NB codec in the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the AMR-NB codec in the Wireshark computer network traffic analyzer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the DCP-ETSI protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, allows attackers to cause service interruptions.

The vulnerability of the DCP-ETSI protocol analyzer, which is part of the Wireshark network traffic analyzer, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the ASN.1 PER protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows attackers to induce service failures.

The vulnerability of the ASN.1 PER protocol analyzer and the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark, a traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Monero protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Monero protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a hacker to cause a service failure...

ContraFix: Agentic Vulnerability Repair Via Differential Runtime Evidence and Skill Reuse

Large language model LLM agents are increasingly used for automated vulnerability repair AVR, where repository-level reasoning enables them to inspect context and produce source-code patches. However, recent empirical results show that these agents still struggle with real-world vulnerabilities...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.95.0-5.hum1 aarch64, x8664 clippy-1.95.0-5.hum1 aarch64, x8664 rust-1.95.0-5.hum1 aarch64, x8664 rust-analyzer-1.95.0-5.hum1 aarch64, x8664 rust-debugger-common-1.95.0-5.hum1 noarch...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=0.9.1.0, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.17.9)

ludwig PYPI version =0.1.1, =0.14.0, =0.9.1.0, =1.3.1 Source cves: CVE-2026-31237 Source advisory: SNYK:PYTHON-LUDWIG-17057195...

CVE-2026-43358

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer Call rcureadlock before exiting the loop in tryreleasesubpageextentbuffer because there is a rcureadunlock call past the loop. This has been detected by...

CVE-2026-43358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer Call rcureadlock before exiting the loop in tryreleasesubpageextentbuffer because there is a rcureadunlock call past the loop. This has been detected by...

The vulnerability of the codec_sbcdecode() function in the SBC analyzer of the Wireshark computer network analysis tool allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the codecsbcdecode function in the SBC analyzer of Wireshark, a computer network analysis tool, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

The vulnerability of SMB2 protocol discoverer, the Wireshark network traffic analyzer, allows a hacker to cause a service failure.

The vulnerability of SMB2 protocol analyzer in Wireshark is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of MySQL protocol discrivers and traffic analyzers for computer networks by Wireshark allows attackers to cause service failures.

The vulnerability of the MySQL protocol analyzer and traffic analyzer for computer networks by Wireshark is related to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...