4270 matches found
OPENSUSE-SU-2026:11199-1 go-sendxmpp-0.16.0-1.1 on GA media
These are all security issues fixed in the go-sendxmpp-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11204-1 ruby4.0-rubygem-uri-1.1.1-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-56218
These are all security issues fixed in the json-c-devel-0.19-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11192-1 python313-openapi-spec-validator-0.9.0-1.1 on GA media
These are all security issues fixed in the python313-openapi-spec-validator-0.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11185-1 gi-docgen-2026.1-1.1 on GA media
These are all security issues fixed in the gi-docgen-2026.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11184-1 chromedriver-150.0.7871.46-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.46-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-38969
ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling. NOTE: the Supplier reports that "The project README states that it is suitable for testing and development, and that its developers do not encourage its use to serve...
SUSE CVE-2026-41676
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive and PkeyCtxRef::derive sets len = buf.len and passes it as the in/out length to EVPPKEYderive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extra...
PT-2026-66344
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description In the rdpsnd server recv formats function within channels/rdpsnd/server/rdpsnd main.c, the software frees context-client formats when receiving a malformed Client Audio Formats PDU without clearing...
PT-2026-55561
These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55560
These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-HF6X-8P5F-CGMF Apache HttpComponents Core HTTP/1 header parsing can cause memory-exhaustion denial of service
Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows a remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive...
Apache HttpComponents Core HTTP/1 header parsing can cause memory-exhaustion denial of service
Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows a remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive...
OPENSUSE-SU-2026:11166-1 c3p0-0.14.1-1.1 on GA media
These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55483
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...
PT-2026-55429
These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11165-1 alloy-1.17.1-1.1 on GA media
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55486
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG fails to pin the search path in the fillDefaultParameters function within pkg/management/postgres/pool/profiles.go when opening superuser...