Schwachstellen, die jetzt zählen.

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

DSA-6597-1 dpdk - security update

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

i18next: i18next: Denial of Service via unsafe recursive object merging

fickling: fickling: Arbitrary code execution via safety analysis bypass for dotted attribute paths

fickling: fickling: Arbitrary code execution via safety check bypass

jack: jack: Information disclosure via unredacted error responses

ring/ring-core: Ring: Denial of Service via regular expression backtracking in wrap-nested-params

tesseract: tesseract: Denial of service via crafted template files

tesseract: tesseract: Denial of Service via crafted traineddata file

ssl_verify_fun: ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

tesseract: Tesseract: Denial of service via crafted trained model file

tesseract: tesseract: Denial of Service via crafted right-to-left text rendering

pgadmin4: pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, where it treated the next double quote as closing the identifier. psql's \copy parser applies the connection's escape character to whichever quote opened a token, so with…

pgadmin4: pgadmin4: Account takeover via account lockout bypass

In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, giving an unauthenticated attacker an unlimited number of password guesses against any internal account, including the administrator's, in the default configuration: - Flask-Security registers its own views next to pgAdmin's. A login submitted to its /login view was checked and logged in without pgAdmin's failed login count or lock. Its…

eu.copernik/copernik-xml-factory: Copernik XML Factory: Information disclosure via unrestricted XInclude resource resolution

crass: crass: Denial of Service via crafted non-ASCII CSS input

crass: crass: Denial of Service via excessive recursion when processing comments

crass: crass: Denial of Service via deeply nested CSS structures

crass: crass: Denial of Service via crafted scientific notation in CSS

hydra: Hydra: Theft of pending deposits via improper transaction validation

GNU libc: Schwachstelle ermöglicht Denial of Service und Codeausführung

It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. (CVE-2026-18374) It was discovered that the GNU C Library incorrectly handled long domain names in DNS search lists. An attacker on the local network could possibly use this issue to cause GNU C Library to crash, resulting in a denial of service. (CVE-2026-8674) It was…

github.com/gopacket/gopacket: gopacket: Denial of Service via crafted SCTP packets

## Summary gopacket decodes SCTP (IP protocol 132) by walking the chunk chain through per-chunk-type decoder functions (`decodeSCTPInit`, `decodeSCTPShutdown`, `decodeSCTPError`, `decodeSCTPSack`, in `layers/sctp.go`). Each of these reads fixed-size header fields and runs count-driven loops **without validating the chunk's declared length against the minimums those reads require**. A single crafted SCTP segment causes a runtime panic (out-of-bounds slice read, or inverted…