120 matches found
PT-2026-34929
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the nilfs2 component within the nilfs mdt save to shadow map function. The btree node cache i assoc inode of the DAT inode is initialized lazily duri...
CLEANSTART-2026-AY21238 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion
Security vulnerability affects the kubernetes-dns-node-cache package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...
CLEANSTART-2026-ZU10048 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2
Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MU54962 Security fixes for ghsa-527x-5wrf-22m2, ghsa-g754-hx8w-x2g6, ghsa-jgfp-53c3-624w, ghsa-px8v-pp82-rcvr, ghsa-vv39-3w5q-974q applied in versions: 1.25.0-r0, 1.26.7-r0
Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MJ07404 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2
Multiple security vulnerabilities affect the kubernetes-dns-node-cache-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GQ31133 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2
Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...
Security update for python311
This update for python311 fixes the following issues: Update to python 3.11.15: CVE-2025-6075: quadratic complexity in os.path.expandvars bsc1252974. CVE-2025-11468: header injection with carefully crafted inputs bsc1257029. CVE-2025-12084: quadratic complexity in xml.minidom node ID cache cleari...
CVE-2026-26018 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache...
GHSA-H75P-J8XM-M278 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache...
GHSA-H75P-J8XM-M278 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, eks-distro...
CVE-2026-26018 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, eks-distro...
SUSE-SU-2026:0314-1 Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing bsc1254997. - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length bsc1254400...
SUSE-SU-2026:0133-1 Security update for python
This update for python fixes the following issues: - CVE-2025-8291: check validity of the ZIP64 End of Central Directory EOCD in the 'zipfile' module bsc1251305. - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing bsc1254997. - CVE-2025-13836: prevent reading an HTTP response...
CVE-2025-64702 vulnerabilities
Vulnerabilities for packages: caddy, frp, buf, k3s, rke2-runtime, traefik, seaweedfs, kubernetes-dns-node-cache, coredns-fips, coredns, seaweedfs-fips, eks-distro-fips, kubernetes-dns-node-cache-fips, syncthing, kubo-fips, traefik-fips, ipfs-cluster-fips, spegel, syncthing-fips, dkron, kargo, q,...
GHSA-G754-HX8W-X2G6 vulnerabilities
Vulnerabilities for packages: caddy, frp, buf, k3s, rke2-runtime, traefik, seaweedfs, kubernetes-dns-node-cache, coredns-fips, coredns, seaweedfs-fips, eks-distro-fips, kubernetes-dns-node-cache-fips, syncthing, kubo-fips, traefik-fips, ipfs-cluster-fips, spegel, syncthing-fips, dkron, kargo, q,...
CVE-2025-12084 Quadratic complexity in node ID cache clearing
When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...
GHSA-47M2-4CR7-MHCW vulnerabilities
Vulnerabilities for packages: caddy, k8sgateway, kargo, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, spegel, dkron, kubo, ipfs-cluster, traefik, frp, q, k3s...
CVE-2025-59530 vulnerabilities
Vulnerabilities for packages: caddy, frp, k3s, rke2-runtime, traefik, kubernetes-dns-node-cache, coredns-fips, coredns, eks-distro-fips, kyverno-policy-reporter-ui-fips, kubernetes-dns-node-cache-fips, kyverno-policy-reporter-ui, syncthing, kubo-fips, traefik-fips, ipfs-cluster-fips, spegel,...
