https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:59:16.551139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:0436 ALSA-2026:0436 — Important: buildah security update 2026-10-02T11:59:16.965111+00:00

Affected: AlmaLinux:10: buildah, AlmaLinux:10: buildah-tests

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Security Fix(es):

* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-16110 bdu:2025-16110 2026-10-02T11:59:16.965201+00:00 bdu:2025-16110 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 certfr-2025-avi-1131 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T11:59:16.965220+00:00 certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad41794 Withdrawn: CLEANSTART-2026-AD41794 — SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the c… 2026-10-02T11:59:16.965243+00:00

Withdrawn by the publisher.

Affected: CleanStart: cert-manager-webhook-pdns-fips

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-263650 EUVD-2026-263650 2026-10-02T11:59:16.965268+00:00 EUVD-2026-263650 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47913 fkie_cve-2025-47913 2026-10-02T11:59:16.965280+00:00

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

 https://cve.radiocsirt.org/vuln/ghsa-56w8-48fp-6mgv GHSA-56w8-48fp-6mgv — golang.org/x/crypto/ssh/agent has a potential denial of service 2026-10-02T11:59:16.965300+00:00

Affected: Go: golang.org/x/crypto/ssh/agent

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-47913 msrc_CVE-2025-47913 — Potential denial of service in golang.org/x/crypto/ssh/agent 2026-10-02T11:59:16.965318+00:00 msrc_CVE-2025-47913 https://cve.radiocsirt.org/vuln/oesa-2026-2434 OESA-2026-2434 — buildah security update 2026-10-02T11:59:16.965334+00:00

Affected: openEuler:24.03-LTS-SP3: buildah

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image Security Fix(es):

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.(CVE-2025-47913)

 https://cve.radiocsirt.org/vuln/opensuse-ru-2026:20010-1 openSUSE-RU-2026:20010-1 — Recommended update for trivy 2026-10-02T11:59:16.965357+00:00

Recommended update for trivy

 https://cve.radiocsirt.org/vuln/rhsa-2025:22743 RHSA-2025:22743 — Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1 2026-10-02T11:59:16.965375+00:00

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS golang: archive/tar: Unbounded allocation when parsing GNU sparse map

 https://cve.radiocsirt.org/vuln/suse-su-2025:4156-1 SUSE-SU-2025:4156-1 — Security update for podman 2026-10-02T11:59:16.965393+00:00

Security update for podman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-47913 UBUNTU-CVE-2025-47913 2026-10-02T11:59:16.965407+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: snapd, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:22.04:LTS: snapd, Ubuntu:Pro:22.04:LTS: golang-go.crypto and 5 more

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2608 WID-SEC-W-2025-2608 — Golang Go: Schwachstelle ermöglicht Denial of Service 2026-10-02T11:59:16.965445+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen.