ROS-20260813-73-0017

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0009

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0024

The vulnerability in Gitea relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability allows a malicious actor to cause service failures through specially created IPv6 traffic...

ROS-20260813-73-0004

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0039

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0021

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0022

The vulnerability in Gitea is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260813-73-0034

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0048

The vulnerability in uriparser is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260813-73-0046

The vulnerability in freerdp3 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260813-73-0044

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-71683

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S find byclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

ROS-20260813-73-0013

The vulnerability in Gitea is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260813-73-0033

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-73288 RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...

Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder when...

SUSE-SU-2026:3597-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

CVE-2025-15684 Open5GS CER init.c diam_log_func assertion

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...