241 matches found
Security update for libsoup2
This update for libsoup2 fixes the following issues: CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. Changes for libsoup2: update after changes in the public suffix list: ".bd" is no longer in the public suffix list so let's use ".jm" instead...
SUSE-SU-2026:3936-1 Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. Changes for libsoup2: - tld-test: update after changes in the public suffix list: '.bd' is no longer in the public suffix list so let's use...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in August 2026. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6...
Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow released in August 2026.. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1,...
ROOT-APP-NPM-CVE-2026-12590 CVE-2026-12590 in body-parser - Patched by Root
Root has patched CVE-2026-12590 in the body-parser package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-13466 CVE-2025-13466 in body-parser - Patched by Root
Root has patched CVE-2025-13466 in the body-parser package for Root:npm. Multiple fixed versions available...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses js-yaml-4.1.1.tgz, tar-7.5.15.tgz, ujson-5.12.1-cp311-cp311-manylinux224x8664.manylinux228x8664.whl, decode-uri-component-0.2.2.tgz and body-parser-1.20.5.tgz which are vulnerable to CVE-2026-53550, CVE-2026-53655, CVE-2026-54911, CVE-2026-45822 and CVE-2026-12590...
CLSA-2026-1787256578 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.0-tuxcare.2...
CLSA-2026-1787256348 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.1-tuxcare.2...
PT-2026-96863
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.1-tuxcare.2...
PT-2026-96864
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.0-tuxcare.2...
CLSA-2026-1787151794 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.19.0-tuxcare.2...
CLSA-2026-1787151664 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.3...
CLSA-2026-1787151617 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.8.4-tuxcare.3...
CLSA-2026-1787151610 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.2...
PT-2026-96859
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.2...
PT-2026-96860
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.8.4-tuxcare.3...
PT-2026-96861
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.3...
PT-2026-96862
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.19.0-tuxcare.2...
CVE-2026-45705: Out-of-bounds Read
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...