CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

DEBIAN-CVE-2026-21714

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerabili...

CVE-2025-67398

creationtimestamp| type| source ---|---|--- 2026-03-30 16:00:22+00:00| seen| https://gist.github.com/Geobm/81155ee01d0d61794afd623f842d764a...

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: Version 5.2.3-0 Disable build for SLES 16 rhnlib: Version 5.2.4-0 Disable build for SLES 16 spacecmd: Version 5.2.6-0 Update translation strings spacewalk-client-tools: Version 5.2.4-0 Disable build for SLES 16 uyuni-common-libs: Version 5.2.3-0...

SUSE-SU-2026:1146-1 Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: - Version 5.2.3-0 Disable build for SLES 16 rhnlib: - Version 5.2.4-0 Disable build for SLES 16 spacecmd: - Version 5.2.6-0 Update translation strings spacewalk-client-tools: - Version 5.2.4-0 Disable build for SLES 16 uyuni-common-libs: - Version...

CVE-2026-4416

creationtimestamp| type| source ---|---|--- 2026-03-30 07:38:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10806-fbc4a-2.html 2026-03-30 08:18:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7zdpv3x2w 2026-03-30 09:10:56+00:00| seen|...

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in...

EUVD-2026-17041

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

no-cloud (0.0.8), nxviz (>=0.2.0, <=0.2.7) +4 more potentially affected by CVE-2026-34073 via cryptography (1.7.1)

cryptography PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - no-cloud 0.0.8 - nxviz =0.2.0, =0.7.0, =1.6.0, =2.1.1rc5, =0.3.3, =0.6.0 Source cves: CVE-2026-34073 Source advisory:...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2026-34073 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2026-34073 Source advisory:...

DEBIAN-CVE-2025-59028

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...

CVE-2026-3113

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:09+00:00| seen| https://nvd.nist.gov/vuln/detail/CVE-2026-4274...

CVE-2026-25340

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-03-26 21:34:39+00:00| seen| Telegram/-QvDDLq1XmiKkWzrEeLXRlLt5ytYeUCyAFDlagxirK1YIk...

org.keycloak:keycloak-authz-policy-common (4.8.2.final), org.keycloak:keycloak-dependencies-server-min (4.8.2.final) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (4.8.2.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.2.final -...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr2), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.3.0.cr2)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr2 -...

org.keycloak:keycloak-authz-policy-common (3.4.1.final), org.keycloak:keycloak-authz-policy-drools (3.4.1.final) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.4.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.1.final -...

org.keycloak:keycloak-authz-policy-common (2.5.4.final), org.keycloak:keycloak-authz-policy-drools (2.5.4.final) +12 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (2.5.4.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.4.final -...

org.keycloak:keycloak-authz-policy-common (3.0.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1) +11 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.0.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.4.0.final), org.keycloak:keycloak-authz-policy-drools (3.4.0.final) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1) +12 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (2.5.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.cr1 -...