CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

UBUNTU-CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

isofs: bound Rock Ridge symlink components to the SL record

...

UBUNTU-CVE-2026-64317

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

CVE-2026-64317

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

CVE-2026-64317 isofs: bound Rock Ridge symlink components to the SL record

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

Malicious code in sl-yh-out-abcxyz1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8634 Malicious code in sl-yh-out-abcxyz1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-2906 Malicious code in swplayer-react-sl (npm)

swplayer-react-sl is a malicious npm package that when imported downloads a C2 dropper from https://coingecko-liard.vercel.app and executes it. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb25be00997a0e21d0d5337b89729fe6c3a99c9364f8a46d4b2e2a828e845f54 The...

SUSE-SU-2026:20176-1 Security update for elemental-register, elemental-toolkit

This update for elemental-register, elemental-toolkit fixes the following issues: elemental-register was updated to 1.8.1: Changes on top of v1.8.1: Update headers to 2026 Update questions to include SL Micro 6.2 Update to v1.8.1: Install yip config files in before-install step Bump...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-62349: Added minimumauthversion to enforce security bsc1254257 CVE-2025-62348: Fixed Junos module yaml loader bsc1254256 Backport security fixes for vendored tornado BDSA-2024-3438 BDSA-2024-3439 BDSA-2024-9026 Other...

EUVD-2016-3415

Malware in sbrugna...

EUVD-2004-0356

Malware in sbrugna...

EUVD-2004-0357

Malware in sbrugna...

EUVD-2016-3417

Malware in sbrugna...

EUVD-2016-3416

Malware in sbrugna...

EUVD-2024-40447

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-_sl- (npm)

The package @zalastax/nolb-sl- was found to contain malicious code...

MAL-2025-13767 Malicious code in @zalastax/nolb-react-sl (npm)

The package @zalastax/nolb-react-sl was found to contain malicious code...

Malicious code in @zalastax/nolb-react-sl (npm)

The package @zalastax/nolb-react-sl was found to contain malicious code...