Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

SUSE-SU-2026:4690-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...

[SECURITY] [DLA 4839-1] gst-plugins-bad1.0 security update

Debian LTS Advisory DLA-4839-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 16, 2026 https://wiki.debian.org/LTS Package : gst-plugins-bad1.0 Version : 1.22.0-4+deb12u8 CVE ID : CVE-2026-12892 CVE-2026-14935 CVE-2026-19387 CVE-2026-52718...

CVE-2026-98403

A flaw was found in the Linux kernel's s390 boot code. This flaw can lead to a Denial of Service DoS through memory corruption during system startup. When the early boot command-line buffer is nearly full, appending Initial Program Load IPL parameters triggers an integer underflow, causing an...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a Denial of Service vulnerability in Jackson Core (CVE-2026-18401)

Summary A security vulnerability CVE-2026-18401 has been identified in the Jackson Core library used by IBM Engineering Lifecycle Optimization - Engineering Publishing. The non-blocking async JSON parser fails to enforce the maxNumberLength constraint default: 1,000 characters defined in...

CVE-2026-111376

A flaw was found in FreeRDP. When handling remote file clipboard transfers on Windows clients, the application fails to properly validate the length of file size responses returned by a Remote Desktop Protocol RDP server. A malicious RDP server can exploit this by returning an abnormally short...

CVE-2026-111381

A flaw was found in FreeRDP. This flaw allows arbitrary code execution or a Denial of Service DoS when parsing persistent cache files. A local attacker can trigger this vulnerability by tricking a user into loading a maliciously crafted cache file containing oversized image dimensions. This...

CVE-2026-111380

A flaw was found in FreeRDP. When handling audio input on Apple platforms, an integer overflow occurs during buffer size calculations. A malicious Remote Desktop Protocol RDP server can exploit this by sending a specially crafted packet during session setup, causing an undersized memory allocatio...

CVE-2026-111379

A flaw was found in FreeRDP. This vulnerability allows a local attacker to execute arbitrary code or cause a denial of service DoS by supplying a specially crafted persistent cache file. When processing the malformed cache file, an arithmetic calculation error causes an undersized memory buffer t...

CVE-2026-111374

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS on a connecting client. When camera redirection is enabled, an attacker-controlled server can send stream requests with unadvertised or excessively large dimensio...

Vulnerabilities in HPE Brocade Fabric OS

HPE has identified several security vulnerabilities in Brocade Fabric OS, particularly in versions prior to 10.0.1, as well as in the 9.2.x and 10.0.x release lines. These vulnerabilities include authentication bypasses, denial-of-service attacks, information leakage, privilege escalation, buffer...

CVE-2026-111458

The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...

Vulnerabilities found in IBM DataPower Gateway and its underlying components

IBM has addressed several security issues in DataPower Gateway versions 10.5 through 11.0, along with numerous underlying components. The vulnerabilities involve a wide range of problems, such as use-after-free bugs, race conditions, buffer overflows, null pointer dereferences, integer overflows,...

[SECURITY] [DSA 6566-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...

Vulnerabilities in Juniper Networks Junos OS

Juniper has identified several vulnerabilities in Junos OS. These vulnerabilities exist in various components of Junos OS, including the VXLAN Gateway Daemon vgd, kmd on MX Series routers, the SDK service with JDAF routing, the TWAMP client rmopd service, the gRPC library, the ipfd daemon on SRX...

CVE-2026-99999

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-111458 ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting

The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...

EUVD-2026-102656

The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...

CVE-2026-111458 ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting

The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...

CVE-2026-111458

The ssldump tool contains a heap-based buffer overflow in the fanx_fingerprint function within ssl/sslxprint.c. The flaw stems from a calculation error where the heap buffer is allocated with 31 fixed characters instead of the 34 required to accommodate the format string used for FAN/1 X.509 cert...