golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to...

CVE-2026-28644

creationtimestamp| type| source ---|---|--- 2026-07-16 04:47:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28642

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28633

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:49+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28623

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28618

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28614

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28602

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28596

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:18+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28584

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:09+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28583

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-28582

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:04+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2025-48566

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2025-48564

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-15778

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-20...

CVE-2026-15775

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720...

Updated openssl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion. CVE-2026-7383 Out-of-Bounds Read in CMS Password-Based Decryption. CVE-2026-9076 Heap Buffer Over-read in ASN.1 Content Parsing. CVE-2026-34180 PKCS12 Files with PBMAC1 Are...

CVE-2026-46459

creationtimestamp| type| source ---|---|--- 2026-07-15 16:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-46458...

Security update for gnutls

This update for gnutls fixes the following issues CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive bsc1263707. CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange...

CVE-2026-6847

creationtimestamp| type| source ---|---|--- 2026-07-13 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwi5ogas2x 2026-07-13 15:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjy3psdgu22 2026-07-13 16:15:03+00:00| seen|...