SUSE-SU-2026:23728-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

SUSE-SU-2026:23707-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

OPENSUSE-SU-2026:21833-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

Security update for php7

This update for php7 fixes the following issue: CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. Other changes: Allow removal of apache2-modphp7 even if the php7 module is not enabled bsc1205782, bsc1276531. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4128-1 Security update for php7

This update for php7 fixes the following issue: - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. Other changes: - Allow removal of apache2-modphp7 even if the php7 module is not enabled bsc1205782, bsc1276531...

AZL-100019 CVE-2026-89092 affecting package glibc 2.38-21

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

DEBIAN-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

UBUNTU-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092

A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System DNS server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for...

SUSE CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

CVE-2026-89092

CVE-2026-89092 affects the nscd (Name Service Cache Daemon) service in GNU C Library 2.3.4 and later . The root cause is an unbounded alloca call that triggers a stack overflow when a malicious or compromised DNS server returns an excessively large response to a DNS query. The primary impact is a...

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

EUVD-2026-75897

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092 Stack overflow in nscd due to unbounded alloca use

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

PT-2026-89678

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.3.4 and later Description The nscd service in the GNU C Library may experience a stack overflow when processing an oversized response from a malicious DNS server. This occurs when the service handles DNS records large...

CVE-2026-89092: Memory Allocation with Excessive Size Value

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

ROS-20260911-73-0006

The vulnerability of the xmtdiscardsubtree function in the MP4Box utility of the GPAC multimedia platform arises from stack overflow during uncontrolled recursion when processing an incorrect XMT scene. This allows a malicious actor to cause service failure...