637948 matches found
cargo-c-0.10.23-2.1 on GA media (moderate)
cargo-c-0.10.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:11513-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
Linux Distros Unpatched Vulnerability : CVE-2026-46603
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767
Pandora has a DoS in DAA extraction: unbounded decompression of DAA chunks caused memory and CPU exhaustion. The fix uses bounded decompression (decompressobj().decompress()) with max_extracted_filesize, checks cumulative decompressed size, and raises a ZipBomb when the limit is exceeded, abortin...
Security Bulletin: This Power System update is being released to address CVE-2026-22796
Summary PowerVM relies on OpenSSL to support a range of features, such as virtual TPM, LPM, and other functionalities that require cryptographic operations. This bulletin provides a remediation for the impacted vulnerability, CVE-2026-22796 by upgrading PowerVM and thus addressing the exposure to...
CVE-2026-74764
CVE-2026-74764 affects Pandora’s TAR extraction. The extractor passes archive member names directly to Python tarfile.TarFile.extract() without a filter, enabling path traversal via ../ or absolute paths. This could allow overwriting files in the Pandora worker directory and potentially lead to a...
CVE-2026-55153 vulnerabilities
Vulnerabilities for packages: airbyte-platform, airbyte-platform-fips, debezium, hono, airbyte-server-fips...
MINI-52JX-Q7R3-QF5W
Bulletin has no description...
MINI-WMQP-F989-FWV7
Bulletin has no description...
MINI-G9H6-4CQV-CVGW
Bulletin has no description...
MINI-XM4P-GQPC-59GR
Bulletin has no description...
MINI-5354-5525-CH8P
Bulletin has no description...
MINI-CMP3-2CWC-6JRW
Bulletin has no description...
MINI-MH5Q-P4VP-63RR
Bulletin has no description...