202430 matches found
CVE-2026-84445 affecting package flannel for versions less than 0.24.2-33
CVE-2026-84445 affecting package flannel for versions less than 0.24.2-33. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package flannel for versions less than 0.24.2-33
CVE-2026-84304 affecting package flannel for versions less than 0.24.2-33. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package packer for versions less than 1.9.5-22
CVE-2026-84304 affecting package packer for versions less than 1.9.5-22. An upgraded version of the package is available that resolves this issue...
Updated freetype2 package fixes a security vulnerability
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TTGetVarDesign implementation used by FTGetVarDesignCoordinates. CVE-2026-50811...
Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
Updated tomcat-native package fixes security vulnerabilities
DoS via TLS handshake. CVE-2026-86243 Insecure OpenSSL options enabled. CVE-2026-86246 Client certificate requirements can be down-graded. CVE-2026-86247...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
SUSE CVE-2026-107386
amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...
SUSE CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
SUSE CVE-2026-107888
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...
SUSE CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-108104
Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...
CVE-2026-95702
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...
httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
CVE-2026-107386 vulnerabilities
Vulnerabilities for packages: dapr, guac, krakend, argo-events-fips, trufflehog, falcosidekick-fips, keda, trufflehog-fips, argo-events, krakend-fips, falcosidekick, telegraf, bento-fips, keda-fips, dapr-fips, bento...
GHSA-W6R9-248C-FRG8 vulnerabilities
Vulnerabilities for packages: dapr, guac, krakend, argo-events-fips, trufflehog, falcosidekick-fips, keda, trufflehog-fips, argo-events, krakend-fips, falcosidekick, telegraf, bento-fips, keda-fips, dapr-fips, bento...
CVE-2025-23207 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2026-19693 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...