Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (October 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-0636 DESCRIPTION: Improper neutralization of special elements used in a...

wireshark security update

An update is available for wireshark. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wireshark packages contain a network protocol analyzer used to capture...

wireshark security update

An update is available for wireshark. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wireshark packages contain a network protocol analyzer used to capture...

RLSA-2026:97879 Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

TencentOS Server 3: wireshark (TSSA-2026:1413)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1413 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

ROS-20261110-73-0002

The SPDY protocol vulnerability in the Netty framework for network application development, servers, and clients is related to uncontrolled resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams

A flaw was found in Netty. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exhausting server memory. Because the SPDY session handler does not restrict the number of concurrent streams initiated by a remote peer, an attacker can transmit an excessive volume of stre...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...

Rocky Linux 8 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc (crlsa-2026_93627)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693627 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

MiracleLinux 8 : wireshark-2.6.2-22.el8_10 (AXSA:2026-2244:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2244:03 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

wireshark security update

An update is available for wireshark. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wireshark packages contain a network protocol analyzer used to capture...

RLSA-2026:93627 Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 For more details about the security issues,...

RockyLinux 8 : wireshark (RLSA-2026:93627)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93627 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

Important: Red Hat Security Advisory: wireshark security update

An update for wireshark is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 For more details about the security issues,...