Threat database

Multiple vulnerabilities in Vim, including command injection via the glob() function, arbitrary code execution through crafted files, and a modeline bypass, have been addressed in a security update. These issues affect Vim versions distributed by SUSE and Red Hat Enterprise Linux 6 Extended Lifecycle Support. The vulnerabilities could allow an attacker to execute arbitrary code if exploited. Red Hat has released patches for these issues and rated the update as important.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as part of a Red Hat security advisory for Red Hat Enterprise Linux 9.6 Extended Update Support. These vulnerabilities include use-after-free bugs, memory safety issues, privilege escalation, sandbox escapes, incorrect boundary conditions, integer overflows, race conditions, information disclosure, denial-of-service, spoofing, and mitigation bypasses affecting various components such as the JavaScript engine, graphics, audio/video, WebRTC, XPCOM, and IMAP parsing. The update is rated as having an important security impact. Users are advised to apply the security update provided by Red Hat to remediate these issues.

This update for the gosec security tool addresses multiple issues including false positives in security rules, fixes for taint analysis hangs and infinite recursion, and enhancements to detection rules such as insecure HTTP cookie configuration and unsafe deserialization. The update also includes dependency bumps and improvements to the CI integration. No specific vulnerability details or exploitation methods are provided.

A security update for GraphicsMagick addresses a heap overflow vulnerability in the pcd decoder that can lead to out-of-bounds reads. This issue is tracked as CVE-2026-26284. The vulnerability has been rated with medium severity. No specific affected versions or patch details are provided in the available data.

A medium severity vulnerability (CVE-2024-10041) in the Pluggable Authentication Modules (PAM) library libpam allows reading hashed passwords. This issue affects certain versions of PAM in SUSE and Red Hat Enterprise Linux 8 distributions. Red Hat has released patches to address this vulnerability and recommends applying updates to affected systems. The vulnerability is related to improper handling in libpam that could expose hashed password data. Additionally, a related access control bypass vulnerability (CVE-2024-10963) in pam_access is also addressed in the same update. The vulnerability impacts multiple architectures including x86_64, aarch64, ppc64le, and s390x. No known exploits are reported in the wild at this time.

A security update for Botan addresses a critical client authentication bypass vulnerability in the TLS 1.3 implementation identified as CVE-2026-34582. This flaw could allow an attacker to bypass client authentication during TLS 1.3 sessions. The update fixes this issue to restore proper authentication enforcement.

This security update for python-Django addresses multiple vulnerabilities including ASGI header spoofing, privilege abuse in admin components, and potential denial-of-service issues related to file uploads and memory limits. These flaws could allow attackers to spoof headers, abuse privileges in the Django admin interface, or cause denial-of-service conditions via crafted requests. The update fixes these issues to improve the security posture of Django applications.

This security update for nodejs24 addresses multiple vulnerabilities including predictable hash collisions, incomplete fixes allowing unauthorized file permission changes, filesystem path disclosure, memory leaks leading to resource exhaustion, timing side-channels enabling HMAC forgery, process crashes from malformed URLs and HTTP headers, and TLS error handling flaws causing crashes. The update advances nodejs24 to version 24.14.1, which includes these security fixes along with other improvements and bug fixes.

A security update for python-Flask-HTTPAuth addresses a vulnerability identified as CVE-2026-34531, which involves the acceptance of empty tokens. This issue has been fixed by disallowing empty tokens in authentication processes. The vulnerability is rated with medium severity. No specific affected versions are provided in the available data.

A security update for pcre2 addresses CVE-2025-58050, which is an integer overflow vulnerability causing a heap buffer overread in the match_ref function due to missing boundary restoration in SCS. This vulnerability has been assigned a medium severity level.

This security update for SUSE's cockpit-machines addresses two denial-of-service vulnerabilities: CVE-2026-25547, caused by unbounded brace range expansion in the brace-expansion library leading to excessive resource consumption and potential Node.js process crashes; and CVE-2026-26996, a Regular Expression Denial of Service (ReDoS) vulnerability in minimatch when processing certain glob patterns with repeated wildcards. The update fixes these issues in specific cockpit package versions for the aarch64 architecture.

A vulnerability in the Linux kernel's SUNRPC svcauth_gss component could cause a NULL pointer dereference when processing a zero-length gss_token. This flaw has been fixed in updated Linux kernel versions. The issue may lead to denial of service but no known exploits are reported in the wild. Multiple Linux kernel subsystems have also been addressed in the same security update.

This security update for glibc addresses two high-severity vulnerabilities related to DNS response parsing and hostname retrieval functions. CVE-2026-4437 involves incorrect parsing of DNS responses from crafted DNS server replies, while CVE-2026-4438 concerns invalid DNS hostnames returned by gethostbyaddr functions. The update also fixes missing checks in NSS configuration functions. Multiple specific glibc versions used in Ubuntu and SUSE distributions are affected.

This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)

A medium severity security update for ovmf addresses CVE-2025-59438, a padding oracle attack vulnerability in mbedtls. This vulnerability allows an attacker to exploit timing differences in cipher error reporting to potentially decrypt data. No specific affected versions or patch details are provided in the input data.

A buffer overflow vulnerability (CVE-2026-3172) exists in the parallel HNSW index build of pgvector, fixed in version 0.8.2. This update also addresses issues with index searches in EXPLAIN output for Postgres 18.

A security update for perl-Authen-SASL addresses CVE-2025-40918 by changing nonce generation to use Crypt::URandom. This update fixes a vulnerability related to nonce generation in the perl-Authen-SASL module. No specific affected versions are stated. The severity is assessed as medium.

This update for patterns-glibc-hwcaps addresses issues by moving the pattern from PackageHub to regular SLES and requires packages optimized for the x86_64 v3 architecture. These packages are automatically included when this architecture is present to improve performance.

A vulnerability in the Linux kernel's i40e driver allowed the ring_len parameter from a virtual function to be assigned directly to hardware memory context without validation. This could lead to improper queue length settings. The issue has been fixed by adding upper boundary checks and enforcing alignment constraints on Tx and Rx queue lengths. The fix is included in security updates for SUSE Linux Enterprise and related distributions. Users must apply the update and reboot to ensure protection.

A high-severity vulnerability in the Linux kernel's AF_XDP socket subsystem was addressed by SUSE. The flaw involved insufficient validation of userspace-supplied xdp_desc structures, allowing crafted inputs to bypass checks due to integer overflow conditions. This could lead to undefined behavior or queuing of invalid frames for transmission. The fix promotes desc->len to 64-bit and adds explicit overflow checks. No specific affected versions are clearly stated.