4226 matches found
CVE-2026-15561 Undertow-core: oom via missing limits in chunked trailer in eap's undertow
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...
CVE-2026-15561
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...
PT-2026-76422
These are all security issues fixed in the musescore-4.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11483-1 zpaqfranz-64.8-1.1 on GA media
These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11476-1 kernel-devel-7.1.7-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-71554
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request...
OPENSUSE-SU-2026:11471-1 tekton-cli-0.46.0-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed...
bouncycastle-1.85-1.1 on GA media (moderate)
bouncycastle-1.85-1.1 on GA media Announcement ID: openSUSE-SU-2026:11445-1 Rating: moderate Cross-References: CVE-2026-12185 CVE-2026-12802 CVE-2026-12803 CVE-2026-12816 CVE-2026-12817 CVE-2026-12852 CVE-2026-12860 CVE-2026-13506 CVE-2026-13586 CVE-2026-14682 CVE-2026-15055 CVE-2026-58059...
OPENSUSE-SU-2026:11462-1 gleam-1.18.1-1.1 on GA media
These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11468-1 python313-cryptography-50.0.0-1.1 on GA media
These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11455-1 libvirt-12.6.0-1.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a privilege escalation (CVE-2026-14446)
Summary IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a privilege escalation vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products...
OPENSUSE-SU-2026:11442-1 OpenImageIO-3.1.16.0-1.1 on GA media
These are all security issues fixed in the OpenImageIO-3.1.16.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11447-1 cockpit-subscriptions-16.3-1.1 on GA media
These are all security issues fixed in the cockpit-subscriptions-16.3-1.1 package on the GA media of openSUSE Tumbleweed...
xen-4.22.0_02-1.1 on GA media (moderate)
xen-4.22.002-1.1 on GA media Announcement ID: openSUSE-SU-2026:11441-1 Rating: moderate Cross-References: CVE-2026-42492 CVE-2026-42493 CVE-2026-42494 CVE-2026-62423 CVE-2026-62426 CVE-2026-62428 CVE-2026-62429 CVE-2026-62430 CVE-2026-62431 CVE-2026-62432 CVE-2026-62433 CVE-2026-62434 CVSS scores...
PT-2026-67392
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information...
OPENSUSE-SU-2026:11438-1 alloy-1.18.0-1.1 on GA media
These are all security issues fixed in the alloy-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed...
python313-asteval-1.0.9-1.1 on GA media (moderate)
python313-asteval-1.0.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11420-1 Rating: moderate Cross-References: CVE-2026-55244 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
gio-branding-upstream-2.88.3-1.1 on GA media (moderate)
gio-branding-upstream-2.88.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11415-1 Rating: moderate Cross-References: CVE-2026-15588 CVSS scores: CVE-2026-15588 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2026-15588 SUSE : 4.8...