Threat database

A vulnerability in libslirp's if_output() function causes queue pointer corruption when moving a session from the fast queue to the batch queue. This flaw allows a guest generating burst traffic to crash the host networking process, resulting in a denial of service.

A vulnerability in libslirp's icmp_forward_error() function allows an out-of-bounds heap read when constructing ICMP error responses. The flaw arises because the length of the quoted original IPv4 packet is taken from the IP header without proper clamping to the actual buffer length. This can lead to leakage of host memory into ICMP error packets sent to guests or containers, potentially exposing sensitive information.

Multiple security vulnerabilities have been identified in the Data Plane Development Kit (dpdk) affecting versions prior to 2:25.11-2.el9_8. These include various memory corruption issues such as out-of-bounds reads and writes, buffer overflows, use-after-free, type confusion, and time-of-check/time-of-use (TOCTOU) race conditions primarily in vhost and vhost-crypto components. These flaws could potentially be triggered by a guest in a virtualized environment, leading to memory corruption on the host. A security update fixing these issues is available.

Multiple security issues were addressed in the tftp-5.4-1.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities present in earlier versions of the tftp package.

Multiple security issues were fixed in the libtesseract5-5.5.4-2.1 package on the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product but specific details about the nature of the issues or affected versions are not provided.

Multiple security issues were addressed in the schismtracker-20261102-1.1 package included in the GA media of openSUSE Tumbleweed. The update fixes these vulnerabilities to improve the security posture of the affected software.

Multiple security issues were fixed in the rustup-1.29.2~0-1.1 package on the GA media of openSUSE Tumbleweed. The details of the vulnerabilities are not specified in the provided data.

Multiple security issues were addressed in the python313-opentelemetry-api package version 1.45.1-1.1 for openSUSE Tumbleweed. The fixes are included in the GA media release. No specific details about the vulnerabilities or their impact are provided.

Multiple security issues have been fixed in the python313-mistune-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product and have been addressed in this package update.

Multiple security issues were addressed in the python313-imagecodecs-2026.10.10-2.1 package for openSUSE Tumbleweed. The fixes are included in the GA media release of this package version.

Multiple security issues have been addressed in the perl-Plack-Middleware-ReverseProxy package version 0.170.0-1.1 available on the GA media of openSUSE Tumbleweed.

Multiple security issues were addressed in the perl-ExtUtils-Typemaps-Default-1.70.0-1.1 package for openSUSE Tumbleweed. These fixes resolve vulnerabilities present in earlier versions of this package.

Multiple security issues were addressed in the netty-tcnative-2.0.85-1.1 package distributed with openSUSE Tumbleweed GA media. The details pertain to fixes applied by the SUSE Product Security Team. No specific vulnerabilities or impacts are described in the available data.

Multiple security issues were addressed in the mariadb-java-client-3.5.11-1.1 package distributed with openSUSE Tumbleweed. These vulnerabilities affect the MariaDB Java client and were fixed in this specific package version.

Multiple security issues were addressed in the libnfs-devel-6.0.2-2.1 package on the GA media of openSUSE Tumbleweed. The update fixes vulnerabilities present in prior versions of the package. No specific details about the nature of the vulnerabilities or their impact are provided.

Multiple security issues were addressed in the libjpeg-turbo package version 3.2.1-86.1 distributed with openSUSE Tumbleweed. The update fixes vulnerabilities present in earlier versions of libjpeg-turbo. No specific details about the nature of the vulnerabilities or their impact are provided.

Multiple security issues were fixed in the heimdall-2.2.2-1.1 package included in the GA media of openSUSE Tumbleweed. The specific vulnerabilities are identified by CVE-2026-57209 and CVE-2026-57210. No detailed technical information or affected versions are provided.

Multiple security issues were addressed in the expat-2.10.0-1.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities present in previous versions of the expat library as used by SUSE. No specific details about the nature of the vulnerabilities or their impact are provided.

The afflib-devel-3.7.23-1.1 package for openSUSE Tumbleweed addresses multiple security issues. These vulnerabilities have been fixed in this package version, which is available on the GA media. No specific details about the vulnerabilities or affected versions are provided.

This entry references a security update for Firefox provided by SUSE Product Security Team, which is functionally equivalent to Red Hat advisory RHSA-2026:94405. No specific vulnerability details, affected versions, or technical information are provided in this record. The update addresses multiple CVEs listed in the tags but lacks explicit descriptions or patch details.