OESA-2026-4238 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

OESA-2026-4236 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

OESA-2026-4237 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

OESA-2026-4235 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

CVE-2026-98414

A flaw was found in the Linux kernel. An issue in the memory control group memcg subsystem occurs when memory allocated within a child control group is transferred to the root group upon group deletion. Subsequent memory reclamation improperly charges pages to the root group without ever unchargi...

CVE-2026-98413

A flaw was found in the Linux kernel's SELinux Security-Enhanced Linux subsystem. When an access check is performed with an empty permission set, the Access Vector Cache AVC fails to initialize the access decision structure before returning. A local attacker can exploit this flaw by triggering...

ZoneClaw-code

ZoneClaw Experiment code for ZoneClaw: Mitigating Persistent Memory Attack by Establishing Memory-Zoning among OpenClaw-Style Computer-Use Agents. This repository contains the benchmark tasks, defense implementations, and evaluation scripts used in the paper. The benchmark studies cross-session...

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

CVE-2026-97205

A flaw was found in NGINX. In certain configurations using asynchronous file I/O and SSI pages with include virtual commands, request processing can access freed memory in a worker process. A remote attacker may trigger memory corruption or a worker crash. Arbitrary code execution may be possible...

CVE-2026-98407

A flaw was found in the Linux kernel's Redpine Signals Inc. rsi wireless driver. An incorrect memory offset calculation during encryption key removal causes data to be written past the allocated buffer, corrupting kernel heap memory. This issue is triggered during routine wireless events such as...

CVE-2026-100802

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Graphics: WebGPU component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2026-100799

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Graphics: WebGPU component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2026-100783

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-100759

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red H...

cve-2026-19553-wrap-bio

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-19553-wrap-bio cve-2026-19553-wrap-bio CPython ssl - Python Software Foundation ssl.SSLContext.wrapbio did not require serverhostname to be non-None when checkhostname is set. SSLObject silently skips hostnam...

SUSE-SU-2026:4691-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decoder bsc1279711. - CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetLis...

BIT-GOLANG-2026-97031 Reject malformed ECH outer extension references in crypto/tls

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...

BIT-GOLANG-2026-94440 Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...

BIT-GOLANG-2026-78659 HTTP/2 server memory exhaustion due to Trailer headers in net/http

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

[SECURITY] [DLA 4839-1] gst-plugins-bad1.0 security update

Debian LTS Advisory DLA-4839-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 16, 2026 https://wiki.debian.org/LTS Package : gst-plugins-bad1.0 Version : 1.22.0-4+deb12u8 CVE ID : CVE-2026-12892 CVE-2026-14935 CVE-2026-19387 CVE-2026-52718...