Open Source Vulnerabilities
c-ares
Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers (GHSA-ph6c-3cvx-mq6v).
c-ares
Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers (GHSA-ph6c-3cvx-mq6v).
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
A DNS reply that arrived from a different server than the one queried could be accepted (GHSA-fqh5-3x7m-wp44).
c-ares
A DNS reply that arrived from a different server than the one queried could be accepted (GHSA-fqh5-3x7m-wp44).
c-ares
Query cache frees a cached answer while the application still reads it, and can return an answer obtained with different EDNS options (GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh). Upstream fixes both with a21160045f: callbacks get their own copy of a cached answer.
c-ares
Query cache frees a cached answer while the application still reads it, and can return an answer obtained with different EDNS options (GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh). Upstream fixes both with a21160045f: callbacks get their own copy of a cached answer.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Query cache frees a cached answer while the application still reads it, and can return an answer obtained with different EDNS options (GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh). Upstream fixes both with a21160045f: callbacks get their own copy of a cached answer.
c-ares
Query cache frees a cached answer while the application still reads it, and can return an answer obtained with different EDNS options (GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh). Upstream fixes both with a21160045f: callbacks get their own copy of a cached answer.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Uninitialized memory returned for a numeric IPv6 name with a prefix length (GHSA-cfcv-8v2j-qj6r).
c-ares
Uninitialized memory returned for a numeric IPv6 name with a prefix length (GHSA-cfcv-8v2j-qj6r).
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
c-ares
Use-after-free and memory corruption when application callbacks re-enter c-ares during cancel, destroy, server reconfiguration or connection teardown (GHSA-pj7p-v3cw-hq66, GHSA-rf6g-ww74-97qh, GHSA-97vq-4mxv-7vhm, GHSA-v33j-65h4-4ch8, GHSA-wpr3-8q3r-4q8c, GHSA-mw23-pfg6-2x9r). Backport of the v1.34 fix set the advisories name: 7f408deb, f944c471 (must ship with it) and 13a10ddd (additional paths, needed by GHSA-pj7p-v3cw-hq66). 1.34.5 has no ARES_CONN_FLAG_NONEW, so the ARES_CONN_FLAG_DEAD enum hunk is re-anchored, and 13a10ddd's process_read() check sits before 1.34.5's `return read_answers()`.
nodemailer
TuxCare security update for nodemailer (1 CVE)
nodemailer
TuxCare security update for nodemailer (1 CVE)
go.opentelemetry.io/otel/sdk, rootio-go.opentelemetry.io/otel/sdk
CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root
go.opentelemetry.io/otel/sdk/ rootio-go.opentelemetry.io/otel/sdk
CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root
Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})
Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})
LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization
LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization
kernel-default, kernel-docs, kernel-ec2, kernel-source, kernel-syms, kernel-trace, kernel-xen
Security update for the Linux Kernel
kernel-default/ kernel-docs/ kernel-ec2/ kernel-source/ kernel-syms/ kernel-trace/ kernel-xen
Security update for the Linux Kernel
gitlab
Incorrect Authorization in GitLab
gitlab
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
gitlab
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
gitlab
Use of Incorrectly-Resolved Name or Reference in GitLab
gitlab
Use of Incorrectly-Resolved Name or Reference in GitLab
gitlab
Authorization Bypass Through User-Controlled Key in GitLab
gitlab
Authorization Bypass Through User-Controlled Key in GitLab
gitlab
Incorrect Authorization in GitLab
gitlab
Use of Less Trusted Source in GitLab
gitlab
Improper Cleanup on Thrown Exception in GitLab
gitlab
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab
gitlab
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab
gitlab
Integer Overflow or Wraparound in GitLab
gitlab
Insertion of Sensitive Information Into Sent Data in GitLab
gitlab
Insertion of Sensitive Information Into Sent Data in GitLab
gitlab
Use of Cache Containing Sensitive Information in GitLab
gitlab
Use of Cache Containing Sensitive Information in GitLab
gitlab
Incorrect Authorization in GitLab
xdg-dbus-proxy
xdg-dbus-proxy security update
