EUVD-2026-104471

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-11831 IBM MQ Heap-based Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-11831

IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) occurring during the processing of a specially crafted client request. An authenticated attacker can leverage this out-of-bounds read to cause a limited denial of service and gain very limited information regarding the process memory ...

OPENSUSE-SU-2026:22135-1 Security update for coredns

This update for coredns fixes the following issues: Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame fragmentation in the gRPC transport boo1279216 Done through the gomodules "require" parameter in servi...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061

The russh Rust SSH client and server library contains a vulnerability in its SSH agent protocol implementation prior to version 0.64.1 . The agent server improperly handles SSH_AGENT_CONSTRAIN_LIFETIME records by spawning a separate long-lived task for every record in a constrained add-key reques...

CVE-2026-111061

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

EUVD-2026-104457

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CLSA-2026-1780516677 kernel: Fix of 135 CVEs

atm: lec: fix use-after-free in sockdefreadable CVE-2026-43050 - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames CVE-2026-23208 - xen/privcmd: fix double free via VMA splitting CVE-2026-31787 - cpufreq: governor: fix double free in...

firefox: thunderbird: Uninitialized memory in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video component...

firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...

firefox: thunderbird: Uninitialized memory in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video component...

firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...

firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...

firefox: thunderbird: Uninitialized memory in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video component...

CLSA-2026-1786761805 kernel: Fix of 46 CVEs

wifi: ath11k: update channel list in reg notifier instead reg worker CVE-2025-23133 - wifi: cfg80211: call regnotifier for self managed wiphy from driver hint CVE-2025-23133 - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception CVE-2025-37957 - KVM: x86: forcibly leave nested mode on vCPU...

CVE-2026-112157

A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the component Memory Service. This manipulation causes resource consumption. Remote exploitation of the attack is...