CVE-2026-25506: Out-of-bounds Write

MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. With the leaked key material, the...

munge -- CWE-787: Out-of-bounds Write

https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh reports: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak...

Debian dsa-6129 : libmunge-dev - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6129 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6129-1 [email protected] https://www.debian.org/security/...

SUSE CVE-2025-67508

gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non-POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileges for a Gardener project to craft...

PT-2026-7436

Name of the Vulnerable Software and Affected Versions MUNGE versions 0.5.0 through 0.5.17 Description MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service used by workload managers like Slurm. A buffer overflow exists in the munged daemon, specifically within the msg unpack function when...

CVE-2025-67508: Improper Neutralization of Special Elements used in a Command

gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileges for a Gardener project to craft...

SUSE-SU-2021:3647-1 Security update for samba and ldb

This update for samba and ldb fixes the following issues: - CVE-2020-25718: Fixed that an RODC can issue forge administrator tickets to other servers bsc1192246. - CVE-2021-3738: Fixed crash in dsdb stack bsc1192215. - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we requir...