MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IOgets with no limit argument. CRuby's IOgets with no limit reads from the current position until the next separator \n with no upper bound on the returned...

CLSA-2023-1697739734 python: Fix of 2 CVEs

CVE-2022-45061: fix quadratic time idna decoding - CVE-2021-3737: fix http client infinite line reading DoS after a HTTP 100 Continue...

Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

CLSA-2022-1647958513 Fix of CVE: CVE-2021-3737

CVE-2021-3737: Fix HTTP client infinite line reading DoS after receiving a '100 Continue' HTTP response...

SUSE-SU-2021:3489-1 Security update for python

This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287...