CVE-2026-98857 élevée kernel: ipvs: bound LBLCR and LBLC cache growth 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98853 élevée kernel: net: gso: limit recursive IP-in-IP segmentation 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98769 élevée kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98725 élevée kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98718 élevée kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98715 élevée kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98639 élevée kernel: KVM: riscv: Fix NACL hfence entry update order 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98621 élevée kernel: net: gue: reject invalid REMCSUM offsets 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98614 élevée kernel: sctp: avoid livelock while updating retransmit path 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98466 élevée kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-110752 élevée perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-92262 élevée mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-85746 élevée mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-104715 élevée cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-98417 élevée kernel: net: xfrm: reject unrepresentable espintcp transport headers 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-86476 élevée gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-106062 élevée gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file 27 oct. 2026 build de 01:25 UTC 6 oct. 2026 CVE-2019-25777 élevée perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment 27 oct. 2026 build de 01:25 UTC 5 oct. 2026 CVE-2017-20285 élevée perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document 27 oct. 2026 build de 01:25 UTC 5 oct. 2026 CVE-2026-103226 élevée ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 27 oct. 2026 build de 01:25 UTC 30 sept. 2026 CVE-2026-109411 élevée samba: Access control bypass via vfs_ceph_rgw case-insensitive open 27 oct. 2026 build de 01:25 UTC GHSA-qpg5-fx6p-8cq3 élevée Using port forwarding silently enables server access to the local SSH agent 27 oct. 2026 build de 01:25 UTC GHSA-vxj5-fg65-x765 élevée net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295) 27 oct. 2026 build de 01:25 UTC CVE-2026-116191 élevée github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service 26 oct. 2026 build de 19:14 UTC 25 oct. 2026 CVE-2026-116189 élevée github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass 26 oct. 2026 build de 19:14 UTC 25 oct. 2026 CVE-2026-68476 élevée kernel: ipvs: reload ip header after head reallocation 26 oct. 2026 build de 19:14 UTC 15 août 2026 CVE-2026-14803 élevée Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder 26 oct. 2026 build de 19:14 UTC 6 juil. 2026 GHSA-h7x6-9mqf-vgmx élevée Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning) 26 oct. 2026 build de 19:14 UTC GHSA-vxc9-rm8f-p56j élevée Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:12261-1 élevée git-bug-0.11.0-3.1 on GA media 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:12262-1 élevée istioctl-1.31.3-1.1 on GA media 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:12264-1 élevée okteto-3.24.1-1.1 on GA media 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:22158-1 élevée Security update for docker 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:22159-1 élevée Security update for mozilla-nss, MozillaFirefox 26 oct. 2026 build de 19:14 UTC openSUSE-SU-2026:22167-1 élevée Security update for the Linux Kernel 26 oct. 2026 build de 19:14 UTC CVE-2026-116179 élevée vllm: vLLM: Denial of Service via video frame limit bypass 26 oct. 2026 build de 07:15 UTC 25 oct. 2026 CVE-2026-116177 élevée vllm: vllm: Denial of Service via unconstrained image decompression 26 oct. 2026 build de 07:15 UTC 25 oct. 2026 CVE-2026-116176 élevée vllm: vllm: Information disclosure via SSRF in X-Request-Id header 26 oct. 2026 build de 07:15 UTC 25 oct. 2026 CVE-2026-116149 élevée ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images 26 oct. 2026 build de 07:15 UTC 25 oct. 2026 CVE-2026-97206 élevée NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ... 26 oct. 2026 build de 01:20 UTC 21 oct. 2026 CVE-2026-108985 élevée ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ... 26 oct. 2026 build de 01:20 UTC 12 oct. 2026 CVE-2026-99064 élevée kernel: cipso: adjust cached option offsets when removing CIPSO 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99056 élevée kernel: strparser: make sure __strp_recv isn't running before tearing down the parser 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99032 élevée In the Linux kernel, the following vulnerability has been resolved: n ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99030 élevée In the Linux kernel, the following vulnerability has been resolved: n ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99018 élevée In the Linux kernel, the following vulnerability has been resolved: r ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99013 élevée In the Linux kernel, the following vulnerability has been resolved: B ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99012 élevée In the Linux kernel, the following vulnerability has been resolved: B ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-99006 élevée In the Linux kernel, the following vulnerability has been resolved: d ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 CVE-2026-98982 élevée In the Linux kernel, the following vulnerability has been resolved: n ... 25 oct. 2026 build de 19:10 UTC 23 oct. 2026 