https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:45:24 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:3210 <p><strong>Affected:</strong> AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more</p> <p>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.</p> <p>Security Fix(es):</p> <p>* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more</p> <p>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.</p> <p>Security Fix(es):</p> <p>* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:3210 https://cve.radiocsirt.org/vuln/bdu:2025-06560 bdu:2025-06560 https://cve.radiocsirt.org/vuln/bdu:2025-06560 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0452 certfr-2025-avi-0452 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0452 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 https://cve.radiocsirt.org/vuln/euvd-2026-228849 EUVD-2026-228849 https://cve.radiocsirt.org/vuln/euvd-2026-228849 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22869 <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22869 https://cve.radiocsirt.org/vuln/ghsa-hcg3-q754-cr77 <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> https://cve.radiocsirt.org/vuln/ghsa-hcg3-q754-cr77 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22869 msrc_CVE-2025-22869 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22869 https://cve.radiocsirt.org/vuln/oesa-2025-2092 <p><strong>Affected:</strong> openEuler:24.03-LTS: buildah</p> <p>The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container&amp;amp;apos;s root file system for manipulation * save container&amp;amp;apos;s root file system layer to create a new image * delete a working container or an image Security Fix(es):</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.(CVE-2025-22869)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: buildah</p> <p>The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container&amp;amp;apos;s root file system for manipulation * save container&amp;amp;apos;s root file system layer to create a new image * delete a working container or an image Security Fix(es):</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.(CVE-2025-22869)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2092 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0094-1 <p>Security update for gitea-tea</p> <p>Security update for gitea-tea</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:0094-1 https://cve.radiocsirt.org/vuln/rhba-2025:3651 <p>gunicorn: HTTP Request Smuggling in benoitc/gunicorn golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh jinja2: Jinja sandbox breakout through attr filter selecting format method</p> <p>gunicorn: HTTP Request Smuggling in benoitc/gunicorn golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh jinja2: Jinja sandbox breakout through attr filter selecting format method</p> https://cve.radiocsirt.org/vuln/rhba-2025:3651 https://cve.radiocsirt.org/vuln/suse-ru-2025:02092-1 <p>Recommended update for podman</p> <p>Recommended update for podman</p> https://cve.radiocsirt.org/vuln/suse-ru-2025:02092-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22869 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:Pro:22.04:LTS: golang-go.crypto, Ubuntu:Pro:24.04:LTS: golang-go.crypto, Ubuntu:25.10: golang-go.crypto</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:Pro:22.04:LTS: golang-go.crypto, Ubuntu:Pro:24.04:LTS: golang-go.crypto, Ubuntu:25.10: golang-go.crypto</p> <p>SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22869 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0606 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0606