shadowsocks-rust-1.25.0-1.1 on GA media (moderate)

shadowsocks-rust-1.25.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11818-1 Rating: moderate Cross-References: CVE-2025-3416 CVE-2026-25541 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3...

Security update for cadvisor (important)

openSUSE Security Update: Security update for cadvisor Announcement ID: openSUSE-SU-2026:0340-1 Rating: important References: 1279044 1279224 1279320 Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

Linux Distros Unpatched Vulnerability : CVE-2026-65969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

The vulnerability of the _libssh2_packet_add() function in the src/packet.c component of the SSH2 implementation library Libssh2 allows a attacker to cause a service failure.

The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260921-73-0071

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Linux Distros Unpatched Vulnerability : CVE-2026-93492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This...

EulerOS Virtualization 2.10.1 : krb5 (EulerOS-SA-2026-3836)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...

Linux Distros Unpatched Vulnerability : CVE-2026-93749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values...

SUSE SLED15 / SLES15 Security Update : python-tornado (SUSE-SU-2026:4073-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4073-1 advisory. This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing...

EulerOS Virtualization 2.10.0 : mod_http2 (EulerOS-SA-2026-3875)

According to the versions of the modhttp2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via maliciou...

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

SUSE SLED15 / SLES15 Security Update : python-tornado6 (SUSE-SU-2026:4076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4076-1 advisory. This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing...

AlmaLinux 8 : apr-util (ALSA-2026:69113)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

The vulnerabilities of the `Buffer.from()` and `Buffer.concat()` functions in the `vm2` library from the NPM package manager allow a malicious actor to gain unauthorized access to protected information and cause service failures.

The vulnerabilities of the Buffer.from and Buffer.concat functions in the vm2 library from the NPM package manager are related to information disclosure. Exploiting these vulnerabilities could allow an attacker to gain unauthorized access to protected information and cause service failures...

The vulnerabilities of the functions cgx_lmac_write() and cgx_lmac_read() in the driver file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the Linux operating system’s network controller driver for Marvell OcteonTX2 AF cores allow a hacker to cause service failures.

The vulnerabilities of the functions cgxlmacwrite and cgxlmacread in the file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the network controller driver for the Marvell OcteonTX2 AF in the Linux operating system are related to insufficient resource management during its existence. Exploitin...

The vulnerability of the sftp_symlink() function in the src/sftp.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the sftpsymlink function in the src/sftp.c component of the SSH2 protocol implementation in the Libssh2 library is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitiv...

Linux Distros Unpatched Vulnerability : CVE-2026-93491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...

RHEL 9 : rhc (RHSA-2026:69105)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69105 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Linux Distros Unpatched Vulnerability : CVE-2026-93488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to...