Attributed metadata history
Up to 100 retained publisher events per page for cf9b3f25a0a8aa465432d2f26c3cb27c6aec49d20719181b75f59dfbb2fa606b. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_967fc5109ac4b9114d
observed · 2026-10-12 13:03:03 UTC
Thank you to Peter Cullen (@pbcullen), Stefan Goetz (@stefangoetzcorelight), Jan Grashöfer (@J-Gras), Eldon Koyle (@ekoyle), Simeon Miteff (simeonmiteff), Kara Zaffarano and Kyle Elliott of Trail of Bits in collaboration with OpenAI, AdaLogics in collaboration with Anthropic, and the Canadian Communications Security Establishment for their contributions to this release. This release fixes the following security issues: HIGH: SMB: Chains of AndX messages can crash Zeek Advisory: GHSA-2xc9-g36m-w7jh HIGH: DNP3: Memory exhaustion via file control (g70v1) fields Advisory: GHSA-px95-jfxw-4jw2 HIGH: SIP: Memory exhaustion from long request/response paths Advisory: GHSA-wjf9-326g-m9h3 HIGH: DHCP: Memory exhaustion from retained options after analyzer violation Advisory: GHSA-hxj7-pcq9-c949 HIGH: SMTP: Memory exhaustion from large numbers of rcptto/to/cc/path entries Advisory: GHSA-49x5-fmqq-4ccv HIGH: SMB: DCE/RPC memory exhaustion from fragment state Advisory: GHSA-rmc2-mqq6-wcw9 HIGH: Analyzer manager: Equivalent scheduled analyzers could exhaust memory Advisory: GHSA-3gxr-8f49-vrgr HIGH: ZIP: Unbounded decompression Advisory: GHSA-2prm-q48h-m96w HIGH: Redis: Parsed R
Fingerprint: 880fabeb4fd1cc87baf666098d7a651f293e4f7a25987b4cecc0b68bb9e919c9
intelligence_src_967fc5109ac4b9114d
observed · 2026-10-12 13:03:03 UTC
available
Fingerprint: aad7192696c6b2cb08b8513f6429b7db52d95a93de11b872e872a4ec57aa6f95