Debian dsa-6580 : erlang - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6580 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6580-1 [email protected] https://www.debian.org/securit...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat. Apache Tomcat is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-77756 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty (CVE-2026-89044, CVE-2026-93488)

Summary IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty (CVE-2026-56819, CVE-2026-59900)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty, due to flaws in Netty's HTTP/2-to-HTTP/1.x translation layer and DelegatingDecompressorFrameListener. Netty is used in our Speech microservices. These...

Critical: dotnet9.0

Issue Overview: Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-109468 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-58280 Insertion of sensitive...

ROS-20261022-73-0103

The vulnerability of the ASP.NET Core software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Critical: dotnet10.0

Issue Overview: Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188 Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core...

Critical: dotnet8.0

Issue Overview: Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188 Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core...

Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3249)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3249 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3250)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3250 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3248)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3248 advisory. Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-109468 Uncontrolled recursion in .NET allows an...

CVE-2026-112212 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an...