4270 matches found
OPENSUSE-SU-2026:11000-1 perl-Crypt-PasswdMD5-1.430.0-1.1 on GA media
These are all security issues fixed in the perl-Crypt-PasswdMD5-1.430.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11001-1 postgresql-jdbc-42.7.11-1.1 on GA media
These are all security issues fixed in the postgresql-jdbc-42.7.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10993-1 apptainer-1.5.1-1.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-41732
JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default...
PT-2026-48933
Name of the Vulnerable Software and Affected Versions apptainer versions prior to 1.5.1 Description Incorrect path matching occurs within the limit container paths directive. This issue specifically affects SUID installations where paths listed in limit container paths are string prefixes of othe...
PT-2026-48599
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...
OPENSUSE-SU-2026:10987-1 perl-Git-Repository-1.326.0-1.1 on GA media
These are all security issues fixed in the perl-Git-Repository-1.326.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-48598
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13 Description An issue exists where .repo files can contain an optional path that may lead to path traversal attacks. Path traversal is a technique that allows an attacker to access files and directories that a...
ggml-devel-9500-1.1 on GA media (moderate)
ggml-devel-9500-1.1 on GA media Announcement ID: openSUSE-SU-2026:10961-1 Rating: moderate Cross-References: CVE-2026-21869 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
OPENSUSE-SU-2026:10982-1 graphite2-1.3.15-1.1 on GA media
These are all security issues fixed in the graphite2-1.3.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10965-1 ack-3.10.0-1.1 on GA media
These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-48115
App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The -B and -C context options accepted any positive integer, and ack...
PT-2026-48116
App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a...
CVE-2026-43973: Allocation of Resources Without Limits or Throttling
Uncontrolled Resource Consumption vulnerability in ninenines gun gunhttp module allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gunhttp:handle/5, three clauses accumulate incoming TCP data into the connection's buffer field using binary concatenati...
perl-HTTP-Daemon-6.170.0-1.1 on GA media (moderate)
perl-HTTP-Daemon-6.170.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10938-1 Rating: moderate Cross-References: CVE-2026-8450 CVSS scores: CVE-2026-8450 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...
CVE-2026-8419
The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scrip...
OPENSUSE-SU-2026:10961-1 ggml-devel-9500-1.1 on GA media
These are all security issues fixed in the ggml-devel-9500-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10963-1 python311-aiohttp-3.14.0-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.14.0-1.1 package on the GA media of openSUSE Tumbleweed...
weblate-5.17.1-1.1 on GA media (moderate)
weblate-5.17.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10929-1 Rating: moderate Cross-References: CVE-2026-41519 CVE-2026-41654 CVE-2026-44263 CVE-2026-44264 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These are all...