https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:31:35.806202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14969 bdu:2026-14969 2026-10-02T15:31:36.476467+00:00 bdu:2026-14969 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0641 certfr-2026-avi-0641 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T15:31:36.476518+00:00 certfr-2026-avi-0641 https://cve.radiocsirt.org/vuln/euvd-2026-292929 EUVD-2026-292929 2026-10-02T15:31:36.476538+00:00 EUVD-2026-292929 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41677 fkie_cve-2026-41677 2026-10-02T15:31:36.476551+00:00

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.

 https://cve.radiocsirt.org/vuln/ghsa-xmgf-hq76-4vx2 GHSA-xmgf-hq76-4vx2 — rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length 2026-10-02T15:31:36.476583+00:00

Affected: crates.io: openssl

The `*_from_pem_callback` APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41677 msrc_CVE-2026-41677 — rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 2026-10-02T15:31:36.476608+00:00 msrc_CVE-2026-41677 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11210-1 openSUSE-SU-2026:11210-1 — cargo-c-0.10.23-1.1 on GA media 2026-10-02T15:31:36.476625+00:00

cargo-c-0.10.23-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22554-1 SUSE-SU-2026:22554-1 — Security update for rust-keylime 2026-10-02T15:31:36.476645+00:00

Security update for rust-keylime

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41677 UBUNTU-CVE-2026-41677 2026-10-02T15:31:36.476663+00:00

Affected: Ubuntu:Pro:20.04:LTS: rust-openssl, Ubuntu:Pro:22.04:LTS: rust-openssl, Ubuntu:Pro:24.04:LTS: rust-openssl, Ubuntu:25.10: rust-openssl, Ubuntu:26.04:LTS: rust-openssl

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1657 WID-SEC-W-2026-1657 — Oracle Linux: Mehrere Schwachstellen 2026-10-02T15:31:36.476692+00:00

Ein Angreifer kann mehrere Schwachstellen in Oracle Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.