CVE-2026-39827

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...

GHSA-6FHV-H367-4JC4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-5HRC-GVXJ-W55P vulnerabilities

Vulnerabilities for packages: py3-django...

quagga: Fix of CVE-2018-5380

CVE-2018-5380: fix BGP NOTIFY debug-print msg array over-read...

CVE-2026-42001

Insufficient Validation of Autoprimary SOA Queries...

CVE-2026-42306 vulnerabilities

Vulnerabilities for packages: grafana, aws-otel-collector, nuclei, undock, skopeo, buildah, zot, nerdctl, trivy, portieris...

[SECURITY] Fedora 44 Update: erlang-cowlib-2.16.1-1.fc44

Support library for manipulating Web protocols...

CVE-2026-45305

Unknown description...

CVE-2026-34002 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-46378 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...

CVE-2026-5947

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG0, it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached as would occur during a query...

libsndfile: integer overflow in ima_reader_init()

A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application...

CVE-2026-41292

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data...

GHSA-CHJ4-28RG-G73V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9MX2-VH7F-423C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9H3R-77J2-MGH9 vulnerabilities

Vulnerabilities for packages: chromium...