SUSE-SU-2026:4039-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4038-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

SUSE-SU-2026:4032-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: CMP indefinite cache growth of...

ROS-20260907-73-1501

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-89672

Name of the Vulnerable Software and Affected Versions strongSwan versions 5.0.2 through 6.0.7 Description An expired pointer dereference occurs during PKCS7 parsing within the openssl plugin. PKCS7 is a standard for cryptographic messages that allows for the signing and encryption of data...

PT-2026-89674

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.1.10 through 6.0.7 Description A NULL pointer dereference occurs in the eap-aka plugin. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL, typically leadi...

PT-2026-89677

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.2.0 through 6.0.7 Description A NULL pointer dereference exists in the x509 plugin's attribute certificate parser. This issue is network exploitable and requires no authentication, potentially leading to a Denial of Servi...

ROS-20260907-73-0106

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0500

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0501

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

WS-2026-0068

Postfix SMTP server null pointer read denial of service. With smtputf8enable = yes the default and strictsmtputf8 = yes not the default, a VRFY command carrying a non-ASCII address without the SMTPUTF8 parameter called mailreset in vrfycmd, resetting MAIL FROM state without resetting RCPT TO stat...

Linux Distros Unpatched Vulnerability : CVE-2026-80816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...

ROS-20260907-73-0104

The vulnerability in gobgp is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-86817

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description A missing NULL pointer check in the paged results handling of the op shared search function allows an unauthenticated remote attacker to crash the LDAP server. This is achieved b...

CVE-2026-18453: NULL Pointer Dereference

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

CVE-2026-18453: NULL Pointer Dereference

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

Linux kernel OVPN Network Device Driver

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...