SUSE CVE-2026-56170

unknown...

SUSE CVE-2026-57108

unknown...

SUSE CVE-2026-60147

unknown...

SUSE CVE-2026-60164

unknown...

SUSE CVE-2026-60166

unknown...

gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59883 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-JQQW-37X4-9RWJ vulnerabilities

Vulnerabilities for packages: gnutar...

CVE-2026-5704 vulnerabilities

Vulnerabilities for packages: gnutar...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

GHSA-M73P-XG7Q-M8F2 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

CVE-2026-60005 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

CVE-2026-42533 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

GHSA-FXFG-V4RJ-HP95 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

CVE-2026-56434 vulnerabilities

Vulnerabilities for packages: commercial-nginx-plus...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-48029

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...

CVE-2026-11721

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For...

CVE-2026-11605

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...