Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

nerva v1.53.1

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion

We present a reproducible pipeline for mapping Common Vulnerabilities and Exposures CVEs to MITRE ATT&CK Enterprise techniques from free-text vulnerability descriptions. Rather than relying on the CWE-CAPEC-ATT&CK derivation chain, whose table-expansion artifacts we quantify, we train a multi-lab...

HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework

Research code for linguistic steganography over LLM chat dialogues, with a single-stream baseline and a batched multi-stream HiTMS protocol that hides several independent secret messages at once and exploits GPU batching for much higher throughput. A Bob model asks questions; an Alice model...

Suricata 7.x < 7.0.17 / 8.x < 8.0.6 Multiple Vulnerabilities

The version of OISF Suricata installed on the remote host is 7.x prior to 7.0.17 or 8.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities, including: - Suricata could be crashed or made to enter an infinite loop when processing crafted network traffic, leading to denial of...

PT-2026-65517

Name of the Vulnerable Software and Affected Versions Rouille versions 0.4.0 through 3.6.2 Description An HTTP response splitting issue exists where remote attackers can inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into input they control. This can...

PT-2026-65661

Summary When an application uses OAuth2::Client typically via an OAuth2::AccessToken and the configured authorization server returns a redirect whose Location header is a protocol-relative URI of the form //attacker.example/leak, OAuth2::Clientrequest resolves the redirect with...

PT-2026-65645

Summary The Diameter AVP decoder in github.com/gopacket/gopacket computes dataLength := avp.Length - uint32headerSize without first ensuring avp.Length = headerSize. When the Vendor flag is set, headerSize is 12, but the only length guard upstream rejects avp.Length CWE-770 unbounded allocation...

ALSA-2026:46990 Important: sssd security, bug fix, and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

Spring Framework STOMP CSRF Vulnerability (CVE-2025-41254)

STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework:6.2.0 - 6.2.11, 6.1.0 - 6.1.23, 6.0.x - 6.0.29, 5.3.0 - 5.3.45, Older, unsupported versions are also affected...

PT-2026-65629

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description Authenticated LDAP access to internal LDB special DNs Distinguished Names allows for a complete domain takeover. This occurs when an authenticated user can access specific internal database...

CVE-2026-55555: Observable Discrepancy

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

PT-2026-65630

Name of the Vulnerable Software and Affected Versions Samba Active Directory Domain Controller AD DC affected versions not specified Description An issue combining LDAP filter injection and improper authorization checks exists when processing LDAP Compare requests. The software fails to properly...

PT-2026-65631

Name of the Vulnerable Software and Affected Versions Samba CTDB affected versions not specified Description Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes t...

PT-2026-65632

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description A flaw exists where a TSIG Transaction Signature packet containing crafted name compression can cause the DNS server to crash. This occurs during the processing of DNS packets that use specific...

TencentOS Server 2: ruby (TSSA-2026:0763)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0763 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

PT-2026-65627

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center KDC password change kpasswd service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos...

PT-2026-65435

Name of the Vulnerable Software and Affected Versions cowlib versions 2.0.0 through 2.18.x Description An unauthenticated remote HTTP/2 or HTTP/3 peer can cause a denial of service by exhausting memory on a server or client. The issue exists in the HPACK and QPACK prefixed-integer decoder cow hpa...

PT-2026-65537

Name of the Vulnerable Software and Affected Versions oauth2 versions 0.4.0 through 2.0.21 Description A protocol-relative redirect in the Location header returned to OAuth2::Clientrequest can override the request authority. This occurs because the method resolves redirects using URImerge, which...

PT-2026-65539

Name of the Vulnerable Software and Affected Versions QTI Neon version 1.0.0 Description In the NeonRelay implementation across Java, Python, and TypeScript, the handleReconnectRequest function forwards RECONNECT REQUEST packets to the host without bounding them or implementing deduplication. An...