88465 matches found
Important: dracut security update
The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition...
CVE-2026-19487: Always-Incorrect Control Flow Implementation
Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...
undici: undici: Denial of Service via WebSocketStream unclean close
A flaw was found in undici's experimental WebSocketStream client. A remote attacker, operating as an untrusted server, can trigger a Denial of Service DoS by closing the TCP connection without a proper WebSocket close handshake. This action causes an unhandled error in the client, leading to the...
io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)
A flaw was found in the netty-codec-compression component of Netty. This vulnerability, caused by a logic error in the bzip2 decoder, allows a remote attacker to send specially crafted bzip2-compressed data. Processing this malformed data can trigger an infinite loop, causing the decoder thread t...
SUSE CVE-2026-71391
GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...
CVE-2025-59322
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...
CVE-2026-73288
CVE-2026-73288 affects RustFS prior to 1.0.0-rc.1, where Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs misclassifies ConfigNotFound, unreadable .metadata.bin data, or unparseable metadata as no lock configuration. This allows objects under COMPLIANCE retention...
SUSE-SU-2026:3598-1 Security update for dracut
This update for dracut fixes the following issue: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432...
Security Bulletin:Vulnerability in net/textproto affects IBM Netezza Appliance
Summary The net/textproto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-42507 Vulnerability Details CVEID:CVE-2026-42507 DESCRIPTION: When returning errors, functions in the net/textproto package would include its input as part of the...
Sensitive Information Disclosure
Apache Camel Netty HTTP component is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of exception responses, where processing errors return full Java stack traces instead of suppressing them, allowing attackers to obtain sensitive information such as...
CVE-2026-68450 btrfs: free mapping node on duplicate reloc root insert
In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert addrelocroot allocates a mappingnode before inserting it into rc-relocroottree. If rbsimpleinsert finds an existing entry, it returns the existing rbnode and leaves the newl...
CVE-2026-68450
In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert addrelocroot allocates a mappingnode before inserting it into rc-relocroottree. If rbsimpleinsert finds an existing entry, it returns the existing rbnode and leaves the newl...
ROS-20260812-73-0025
The vulnerability of the Wireshark parser for analyzing BLF files related to traffic analysis in computer networks is linked to errors during initialization. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
PT-2026-80510
The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...
PT-2026-99940
Name of the Vulnerable Software and Affected Versions Axios versions 1.13.0 through 1.19.x Description In the Node.js environment, the Http2Sessions component fails to implement proper error handling for ClientHttp2Session during the initialization or reuse of HTTP/2 sessions. When a request is...
CVE-2026-71194: Incorrect Resource Transfer Between Spheres
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...
CVE-2026-15141: Origin Validation Error
The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...
CVE-2026-18847: Origin Validation Error
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...
PT-2026-71070
Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to properly handle decryption errors, which allows encrypted volumes to be mounted as plaintext. Recommendations Update to version 7.7.4 or later...
