CVE-2026-35188

A double-free vulnerability exists in the OpenSSL library (specifically affecting packages like openssl and libcrypto3-2.34) when processing TLS OCSP stapling . A malicious server can deliver a crafted response through the status_request extension, triggering the double-free during the client's c...

EUVD-2024-22161

Malicious code in bioql PyPI...

Oracle Linux 9 : git-lfs (ELSA-2024-2724)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2724 advisory. 3.4.1-2 - Rebuild with new Golang - Resolves: RHEL-32570, RHEL-28385, RHEL-28402, RHEL-28432 Tenable has extracted the preceding description block...

MGASA-2018-0153 Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities: In virsh, the hostname could crafted maliciously with ssh arguments, which would be passed to ssh bsc1053600. The defaulttlsx509verify and related parameters in qemu.conf control whether the TLS servers in QEMU request & verify certificates...