CVE-2026-45383

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit a heap buffer overflow vulnerability by providing specially crafted video files. This occurs when decoding a Wavefront Parallel Processing WPP HEVC slice, where malformed headers...

SUSE-SU-2026:3178-1 Security update for nasm

This update for nasm fixes the following issues - CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the objdirective function bsc1261986. - CVE-2026-6068: heap use after free vulnerability in response file processing bsc1261985...

Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary Multiple vulnerabilities were addressed. Vulnerability Details CVEID:CVE-2025-69873 DESCRIPTION: ajv Another JSON Schema Validator before 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON...

glibc: glibc: Out-of-bounds write via TSIG record processing

A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG Transaction Signature records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: mlflow, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, tensorflow-gpu-jupyter, superset, superset-fips, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2026.1-fips,...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: mlflow, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, tensorflow-gpu-jupyter, superset, superset-fips, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2026.1-fips,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: mlflow, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, tensorflow-gpu-jupyter, superset, superset-fips, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2026.1-fips,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: mlflow, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, tensorflow-gpu-jupyter, superset, superset-fips, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2026.1-fips,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: mlflow, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, tensorflow-gpu-jupyter, superset, superset-fips, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2026.1-fips,...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processing of oversized request payloads. An attacker can exhaust...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the QUIC transport parameters extension handler during the processing of HelloRetryRequest messages. An attacker can cause increased memory consumption by repeatedly triggering...

PT-2026-63414

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.16.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.16.8-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1 Description An attacker can craft...

PT-2026-63377

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description Insufficient validation of the RRSIG.Labels field and premature cache writes during RFC 8198 aggressive NSEC processing enable cache poisoning. An attacker controlling a single...

PT-2026-63476

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description Insufficient validation of externally sourced BSON Binary JSON data during aggregation pipeline processing on a standalone mongod instance can lead to memory corruption. This may result in...

PT-2026-63468

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption, potentially leading to resource exhaustion. This CPU-bound operation cann...

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...

PT-2026-63396

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description The RadAsyncUpload component contains a flaw in client-state processing where the system can distinguish between decryption failures and invalid-JSON parse failures. This behavior...

ALSA-2026:42899 Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...

PT-2026-63475

Name of the Vulnerable Software and Affected Versions mongod affected versions not specified Description An authenticated user with read access can cause the mongod process to terminate. This occurs when specific aggregation expressions that execute server-side JavaScript are used, leading to...

ALSA-2026:42895 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...