https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:41:36.499630+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4694 ALSA-2020:4694 — Moderate: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-04T03:41:36.924983+00:00

Affected: AlmaLinux:8: libslirp, AlmaLinux:8: libslirp-devel, AlmaLinux:8: python-podman-api

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)

* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

* golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T03:41:36.925070+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/euvd-2026-42186 EUVD-2026-42186 2026-10-04T03:41:36.925092+00:00 EUVD-2026-42186 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14040 fkie_cve-2020-14040 2026-10-04T03:41:36.925105+00:00

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

 https://cve.radiocsirt.org/vuln/ghsa-5rcv-m4m3-hfh7 GHSA-5rcv-m4m3-hfh7 — golang.org/x/text Infinite loop 2026-10-04T03:41:36.925128+00:00

Affected: Go: golang.org/x/text

Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

### Specific Go Packages Affected golang.org/x/text/encoding/unicode golang.org/x/text/transform

 https://cve.radiocsirt.org/vuln/gsd-2020-14040 gsd-2020-14040 2026-10-04T03:41:36.925151+00:00 gsd-2020-14040 https://cve.radiocsirt.org/vuln/rhsa-2020:3087 RHSA-2020:3087 — Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.17.5 container images security update 2026-10-04T03:41:36.925163+00:00

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash

 https://cve.radiocsirt.org/vuln/rhsa-2020:3665 RHSA-2020:3665 — Red Hat Security Advisory: go-toolset:rhel8 security update 2026-10-04T03:41:36.925181+00:00

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash golang: data race in certain net/http servers including ReverseProxy can lead to DoS golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14040 UBUNTU-CVE-2020-14040 2026-10-04T03:41:36.925201+00:00

Affected: Ubuntu:16.04:LTS: golang-x-text, Ubuntu:18.04:LTS: golang-x-text, Ubuntu:20.04:LTS: golang-golang-x-text, Ubuntu:20.04:LTS: golang-x-text

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-04T03:41:36.925227+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.