Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:55:19 +0000 Withdrawn: CLEANSTART-2026-IL48239 — Security fixes in ztunnel-fips 1.30.0-r0 https://vulnerability.circl.lu/vuln/cleanstart-2026-il48239 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.30.0-r0 fixes 3 vulnerabilities: ghsa-3v94-mw7p-v465, ghsa-q2qq-hmj6-3wpp, ghsa-cq8v-f236-94qc</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.30.0-r0 fixes 3 vulnerabilities: ghsa-3v94-mw7p-v465, ghsa-q2qq-hmj6-3wpp, ghsa-cq8v-f236-94qc</p> https://vulnerability.circl.lu/vuln/cleanstart-2026-il48239 RUSTSEC-2026-0119 — CPU exhaustion during message encoding due to O(n²) name compression https://vulnerability.circl.lu/vuln/rustsec-2026-0119 <p><strong>Affected:</strong> crates.io: hickory-proto</p> <p>During message encoding, `hickory-proto`&#39;s `BinEncoder` stores pointers to labels that are candidates for name compression in a `Vec&lt;(usize, Vec&lt;u8&gt;)&gt;`. The name compression logic then searches for matches with a linear scan.</p> <p>A malicious message with many records can both introduce many candidate labels, and invoke this linear scan many times. This can amplify CPU exhaustion in DoS attacks.</p> <p>This is similar to [CVE-2024-8508](https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-8508.txt).</p> <p>We recommend all affected users update to `hickory-proto` 0.26.1 for the fix.</p> <p><strong>Affected:</strong> crates.io: hickory-proto</p> <p>During message encoding, `hickory-proto`&#39;s `BinEncoder` stores pointers to labels that are candidates for name compression in a `Vec&lt;(usize, Vec&lt;u8&gt;)&gt;`. The name compression logic then searches for matches with a linear scan.</p> <p>A malicious message with many records can both introduce many candidate labels, and invoke this linear scan many times. This can amplify CPU exhaustion in DoS attacks.</p> <p>This is similar to [CVE-2024-8508](https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-8508.txt).</p> <p>We recommend all affected users update to `hickory-proto` 0.26.1 for the fix.</p> https://vulnerability.circl.lu/vuln/rustsec-2026-0119