siper

Siper Shield Siper is a high-performance, XDP-based IP blacklist firewall built with Go and C eBPF. It allows you to drop malicious traffic at the earliest possible stage in the Linux networking stack—the network driver level. By leveraging XDP Express Data Path, Siper processes packets before th...

[SECURITY] Fedora 45 Update: ocaml-trie-1.0.0-37.fc45

This package contains an implementation of a strict impure trie tree...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an out-of-bounds write in triegetnextkey The triegetnextkey function allocates a node stack with a size of trie-maxprefixlen. However, it writes trie-maxprefixlen + 1 nodes to the stack when the stack is full, after...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-65330...

perl:5.32 security update

perl 4:5.32.1-475 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-247945 4:5.32.1-474 - Resolves: RHEL-153834 - Fix CVE-2025-40909 - Clone dirhandles without fchdir 4:5.32.1-473 - Fix CVE-2023-47038 - Added perl-autouse and perl-ExtUtils-MM-Utils to perl...

perl security update

5.26.3 - Backport patches from CentOS - Fix Time-Local tests to pass after year 2019 bug 1807120 4:5.26.3-423.1 - Fix CVE-2026-13221 - Don't create a regex trie that would overflow...

Oracle Linux 8 : ELSA-2026-67162-0: / perl (ELSA-2026-671620)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671620 advisory. 5.26.3 - Backport patches from CentOS - Fix Time-Local tests to pass after year 2019 bug 1807120 4:5.26.3-423.1 - Fix CVE-2026-13221 - Don't create a regex tr...

perl security update

4:5.32.1-484 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow Thu Jul 10 2025 Jitka Plesnikova - Resolves: RHEL-96651 4:5.32.1-482 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir...

perl security update

4:5.40.2-515 - Fixes: CVE-2026-13221 - regcompstudy: Don't create a trie that would overflow 4:5.40.1-514 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir 4:5.40.2-513 - 5.40.2 bump see - Resolves: RHEL-87186 4:5.40.1-512 - Resolves: RHEL-75798 - 5.40.1 bump see - Add config.over to make...

Oracle Linux 9 : ELSA-2026-67155-0: / perl (ELSA-2026-671550)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671550 advisory. - Fixes: CVE-2026-13221 - Don't create a trie that would overflow Thu Jul 10 2025 Jitka Plesnikova Tenable has extracted the preceding description block...

CVE-2026-79604

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

UBUNTU-CVE-2026-79604

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

oxenstored: Unbounded accumulation of watches

ISSUE DESCRIPTION Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. IMPACT A guest can cause unbounded memory usage in oxenstored. This can lead to a...

PT-2026-95552

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

CVE-2026-49343

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie in both userAccountsSyncer.go and kappAccountsSyncer.go,...

CVE-2026-49343 Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie in both userAccountsSyncer.go and kappAccountsSyncer.go,...

EUVD-2026-54716

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie in both userAccountsSyncer.go and kappAccountsSyncer.go,...

CVE-2026-49343

Summary of CVE-2026-49343 (Klever-Go KVM) In versions prior to 1.7.18 of Klever-Go, the account-data trie syncers leak bounded throttler slots on error paths in syncDataTrie(): StartProcessing() is called but EndProcessing() is only reached on success or a duplicate-root early return. As a result...

CVE-2026-49343

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie in both userAccountsSyncer.go and kappAccountsSyncer.go,...

CVE-2026-49343 Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie in both userAccountsSyncer.go and kappAccountsSyncer.go,...