Most recent entries from all

bdu:2026-09413

Withdrawn: CLEANSTART-2026-AH11699 — Security fixes in ollama 0.20.3-r1

Withdrawn by the publisher.

Affected: CleanStart: ollama

Package ollama version 0.20.3-r1 fixes 13 vulnerabilities: CVE-2026-33811, CVE-2026-33812, CVE-2026-33813, CVE-2026-33814, CVE-2026-39817...

EUVD-2026-330392

fkie_cve-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

openSUSE-SU-2026:10682-1 — rclone-1.74.0-1.1 on GA media

rclone-1.74.0-1.1 on GA media

RHSA-2026:17789 — Red Hat Security Advisory: Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update

io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter lodash: lodash: Arbitrary code execution via untrusted input in template imports path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests follow-redi…

UBUNTU-CVE-2026-33813

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

WID-SEC-W-2026-1328 — Red Hat Hardened Images RPMs: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.