OPENSUSE-SU-2026:20479-1 Security update for clamav

This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file bsc1259207. Non security issue: - Support...

OPENSUSE-SU-2026:20569-1 Security update for rust1.94

This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher bsc1261876 Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwrapping varint decoding during parameters...

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's MCP architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence AI supply chain. "This flaw enables Arbitrary Command Execution R...

CVE-2026-6654 Use-After-Free and Double-Free in IntoIter::drop when element drop panics

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

libp2p-rust DoS

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending DISCOVER requests...

libp2p-rust DoS

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2026-34623

Name of the Vulnerable Software and Affected Versions rust-openssl versions 0.10.39 through 0.10.77 Description The EVP DigestFinal function always writes EVP MD CTX sizectx to the out buffer. If the out buffer is smaller than that size, the MdCtxRef::digest final function writes past its end,...

PT-2026-35041

Name of the Vulnerable Software and Affected Versions rust-openssl versions 0.9.24 through 0.10.77 Description FFI trampolines behind the functions set psk client callback, set psk server callback, set cookie generate cb, and set stateless cookie generate cb in SslContextBuilder forward the user...

PT-2026-33606

Some increased actor activities are shown targeting rust-coreutils CVE-2026-6435 https://t.co/IPnkuw7pJ4...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: rustup, tealdeer, sdp-k8s-injector, sccache, wasm-pack, qdrant, linkerd-extension-init, parseable, ntpd-rs, samply, shadowsocks-rust, uv, kdash, rye, zola, atuin, ztunnel, zellij, linkerd2, xh, berg, lychee, linkerd-network-validator, wasmcloud, buck2, cargo-audit,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: rustup, tealdeer, sdp-k8s-injector, sccache, wasm-pack, qdrant, linkerd-extension-init, parseable, ntpd-rs, samply, shadowsocks-rust, uv, kdash, rye, zola, atuin, ztunnel, zellij, linkerd2, xh, berg, lychee, linkerd-network-validator, wasmcloud, buck2, cargo-audit,...

GHSA-XPHW-CQX3-667J vulnerabilities

Vulnerabilities for packages: ruff, rust-analyzer...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rustup, sdp-k8s-injector, mdbook, nushell, yara-x, sccache, qdrant, parseable, starship, just, ntpd-rs, samply, shadowsocks-rust, uv, biome, yazi, wizer, kdash, hurl, rye, zed, zola, atuin, zellij, linkerd2, xh, berg, lychee, linkerd-network-validator, wasmcloud,...

GHSA-XPHW-CQX3-667J vulnerabilities

Vulnerabilities for packages: rust-analyzer, ruff, typst...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: virtiofsd, starship, komodo, sqlx, mdbook, linkerd-network-validator, rye, fnm, kdash, sdp-k8s-injector, watchexec, mountpoint-s3, ruff, uv, yara-x, wasmtime, cargo-c, parseable, zola, samply, vector, zizmor, biome, rustup, worktrunk, cargo-audit, lychee, zellij,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rust1.93 (SUSE-SU-2026:1415-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1415-1 advisory. Security issue: - CVE-2026-31812: denial of service via crafted QUIC initial packet bsc1259623. Non...

📄 Activitypub-federation-rust 0.7.1 Server-Side Request Forgery

This is a server-side request forgery scanner for Activitypub-federation-rust version 0.7.1. ================================================================================================================================== | Title : Activitypub-federation-rust 0.7.1 Lemmy ActivityPub SSRF Scanne...

PT-2026-33584

Some increased actor activities are shown targeting rust-coreutils CVE-2026-6434 https://t.co/W5U85rXi0q...

a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3802 more potentially affected by CVE-2026-93600 via rustls-webpki (>=0.101.7, <=0.102.8)

rustls-webpki CARGO version =0.101.7, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 - actix-csrf 0.8.0 and more Source cves: CVE-2026-93600 Source advisory: OSV:GHSA-965H-392X-2MH5...

Security update for rust1.93

This update for rust1.93 fixes the following issues: Security issue: CVE-2026-31812: denial of service via crafted QUIC initial packet bsc1259623. Non security issue: Resolve missing gcc requirement that may affect some crate buildin bsc1253321. Patch Instructions: To install this SUSE update use...