15633 matches found
OESA-2026-3176 buildah security update
The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...
OESA-2026-3175 buildah security update
The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...
SUSE CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
PT-2026-71342
Name of the Vulnerable Software and Affected Versions russh versions prior to 0.62.4 Description A malicious SSH server can crash a client session by sending a malformed KEX ECDH REPLY containing a server ephemeral value that is not 32 bytes long. The Curve25519Kex::compute shared secret function...
PT-2026-71922
Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An authenticated SSH client can trigger a denial of service by sending a pty-req channel request containing more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs utilizes a...
CVE-2026-64230: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...
PT-2026-64351
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division-by-zero issue exists in the i2c davinci driver. When the clock-frequency property is missing from the device tree, the driver uses the DAVINCI I2C DEFAULT BUS FREQ macro...
CVE-2026-64235: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIGCALLDEPTHTRACKING enabled on an x86 retbleed-affected platform eg: Skylake, with retbleed=stuff, registering a dynamic ftrace trampoline crashes on...
CVE-2026-64214: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64241: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...
CVE-2026-64236: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...
PT-2026-71712
Name of the Vulnerable Software and Affected Versions frp versions 0.53.0 through 0.70.0 Description The optional SSH Tunnel Gateway in pkg/ssh/server.go incorrectly parses SSH exec channel requests by adding 4 to a four-byte big-endian length controlled by the user. Providing a length of...
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
...
Alibaba Cloud Linux 3 : 0221: podman (ALINUX3-SA-2026:0221)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0221 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33811: When using LookupCNAME wit...
RHEL 10 : kernel (RHSA-2026:44694)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:44694 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: actcsum: validat...
CVE-2026-64012
A flaw was found in the Linux kernel's Stochastic Fair Blue SFB queue discipline net/sched: schsfb. This vulnerability occurs when the sfb component, acting as a parent queue, attempts to retrieve a network packet from its child queue using an incorrect dequeue function. This can lead to a null...
RHEL 9 : kernel (RHSA-2026:43231)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43231 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip...
CVE-2026-65315
Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...
GHSA-HRXH-6V49-42GF gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine internal/xds/rbac and the HTTP/2 transport server implementation internal/transport. These vulnerabilities could result in: - Authorization Bypass Fail-Open when translating...
