RHEL 10 : gdb (RHSA-2026:73427)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73427 advisory. The GNU Debugger GDB allows debugging of programs written in C, C++, and other languages by executing them in a controlled fashion and printing the...

Linux Distros Unpatched Vulnerability : CVE-2026-100890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library...

ALSA-2026:73425 Important: gdb security update

The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data. Security Fixes: gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 For more details about the...

SUSE CVE-2025-1218

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

SUSE CVE-2026-67415

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to th...

SUSE CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

SUSE CVE-2026-93789

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGNtlvlen, 4 against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs...

Uncontrolled Recursion

Overview PyJWT is a Python implementation of RFC 7519. Affected versions of this package are vulnerable to Uncontrolled Recursion via the load method in jwt/apijws.py when parsing a JWT with a deeply nested recursive JSON structure in the header. An attacker can supply a JWT whose header contains...

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

Infinite loop

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Infinite loop via the afterdoctypenamestate handler in Domino's HTML parser lib/HTMLParser.js, used by @angular/platform-server for server-side rendering. Whe...

GHSA-F67J-2JQW-JPQ7 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

CVE-2026-102272

A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...

CVE-2026-98143

A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...

Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 4.6.8: CVE-2026-19694: TTX Logger file parser crash bsc1275279. CVE-2026-19695: Gammu DCT3 trace file parser crash bsc1275280. CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows...

SUSE-SU-2026:4379-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 4.6.8: - CVE-2026-19694: TTX Logger file parser crash bsc1275279. - CVE-2026-19695: Gammu DCT3 trace file parser crash bsc1275280. - CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4375-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for redis

This update for redis fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4370-1 Security update for redis

This update for redis fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...