crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CGA-65W6-9QQR-6693

Bulletin has no description...

OPENSUSE-SU-2026:21201-1 Security update for jackson-annotations, jackson-core, jackson-databind

This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation bsc1268897. - CVE-2026-54513: jackson-databind has an array...

CVE-2026-54673

electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...

CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`

electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...

CVE-2026-11367

creationtimestamp| type| source ---|---|--- 2026-06-30 19:17:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjppwjmog2l...

CVE-2026-10654

creationtimestamp| type| source ---|---|--- 2026-06-30 18:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p...

CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

UBUNTU-CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

EUVD-2026-40314

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012

CVE-2026-58012 affects GLib. A buffer over-read can occur in g_regex_replace when used with the G_REGEX_RAW flag and case-change replacement escapes because string_append processes matched substrings with UTF-8 functions that expect valid UTF-8 input, even when treated as raw bytes. Impact: minor...

CVE-2026-57637

creationtimestamp| type| source ---|---|--- 2026-06-30 12:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiyatzvyv2j...

CVE-2025-7406

creationtimestamp| type| source ---|---|--- 2026-06-30 09:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqhavdv224...

PT-2026-53871

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A buffer over-read can occur in the g regex replace function when the G REGEX RAW compile flag is used alongside case-change replacement escapes. This happens because the string append function...

CVE-2026-8664

creationtimestamp| type| source ---|---|--- 2026-06-29 21:40:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhbqrf6b2d...

CVE-2026-57945

creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5osmcfv2g 2026-06-29 18:49:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ozv2oa2d 2026-06-29 21:14:48+00:00| seen|...

CVE-2026-57328

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguuxldxi2t...

CVE-2026-12856

creationtimestamp| type| source ---|---|--- 2026-06-29 15:43:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgtcm3hev2p 2026-06-29 15:54:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtxj5udt2d 2026-06-29 17:48:57+00:00| seen|...