197890 matches found
Security update for python313
This update for python313 fixes the following issues: Security issues fixed: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974...
brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...
CVE-2026-92873
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node...
CVE-2026-92872
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
CVE-2026-92871
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
CVE-2026-92870
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
CVE-2026-92869
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
gdb security update
An update is available for gdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
GHSA-2VR4-CQ9G-PVRC vulnerabilities
Vulnerabilities for packages: sqlpad, commercial-gitlab-rails-ee, code-server, unleash, lerna, commercial-gitlab-rails-ee-fips, wazuh-dashboard, langfuse, actions-runner, pulumi, unleash-fips, renovate, graalvm, kibana, wazuh-dashboard-fips, librechat, npm, prism, homepage, langfuse-fips,...
CVE-2026-101910 vulnerabilities
Vulnerabilities for packages: sqlpad, commercial-gitlab-rails-ee, code-server, unleash, lerna, commercial-gitlab-rails-ee-fips, wazuh-dashboard, langfuse, actions-runner, pulumi, unleash-fips, renovate, graalvm, kibana, wazuh-dashboard-fips, librechat, npm, prism, homepage, langfuse-fips,...
CVE-2026-101913 vulnerabilities
Vulnerabilities for packages: sqlpad, commercial-gitlab-rails-ee, code-server, unleash, lerna, commercial-gitlab-rails-ee-fips, wazuh-dashboard, langfuse, actions-runner, pulumi, unleash-fips, renovate, graalvm, kibana, wazuh-dashboard-fips, librechat, npm, prism, homepage, langfuse-fips,...
GHSA-RPW4-54J3-4H4Q vulnerabilities
Vulnerabilities for packages: sqlpad, commercial-gitlab-rails-ee, code-server, unleash, lerna, commercial-gitlab-rails-ee-fips, wazuh-dashboard, langfuse, actions-runner, pulumi, unleash-fips, renovate, graalvm, kibana, wazuh-dashboard-fips, librechat, npm, prism, homepage, langfuse-fips,...
GHSA-9F6G-J8CH-79G4 vulnerabilities
Vulnerabilities for packages: json-server, wazuh-dashboard-fips, tileserver-gl, wazuh-dashboard, http-https-echo, azurite, http-https-echo-fips...