RLSA-2026:38847 Important: nginx:1.24 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...

Everest-Core: Input validation vulnerability

Everest-core is a major component of the open-source electric vehicle charging software stack developed by EVerest. Versions of everest-core prior to 2025.10.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from the use of the assert function to handle...

Various Huawei products pointer double release vulnerability

Huawei CloudEngine 6800 and others are products of Huawei, China.CloudEngine 6800 is a 6800 series 10 Gigabit Ethernet switch for data centers.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch. A pointer double-release...

Debian DLA-97-1 : eglibc security update

CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character '0xffff' is specified, then iconv segfaults. CVE-2014-6040 Crashes on invalid input in IBM gconv modules BZ 17325 These changes...

openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:1049-1)

a race condition in the accept implementation of smtpd.py could lead to a denial of service CVE-2010-3493. - integer overflows and insufficient size checks could crash the audioop module CVE-2010-2089, CVE-2010-1634. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...