go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak

A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...

OPENSUSE-SU-2026:10953-1 gleam-1.17.0-1.1 on GA media

These are all security issues fixed in the gleam-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10957-1 perl-HTML-Parser-3.850.0-1.1 on GA media

These are all security issues fixed in the perl-HTML-Parser-3.850.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10954-1 kernel-devel-7.0.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10950-1 perl-Cpanel-JSON-XS-4.410.0-1.1 on GA media

These are all security issues fixed in the perl-Cpanel-JSON-XS-4.410.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10952-1 sshfs-3.7.6-1.1 on GA media

These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10943-1 amazon-ssm-agent-3.3.4624.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.4624.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10942-1 7zip-26.01-1.1 on GA media

These are all security issues fixed in the 7zip-26.01-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45966

These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10934-1 libmariadbd-devel-11.8.8-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-46039

Name of the Vulnerable Software and Affected Versions MariaDB versions prior to 11.8.8 MariaDB versions prior to 11.4.12 MariaDB versions prior to 10.11.18 MariaDB versions prior to 10.6.27 Description A security issue exists in MariaDB. Technical details regarding the exploitation of this flaw a...

OPENSUSE-SU-2026:10938-1 perl-HTTP-Daemon-6.170.0-1.1 on GA media

These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10918-1 OpenImageIO-3.1.14.0-1.1 on GA media

These are all security issues fixed in the OpenImageIO-3.1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10928-1 vifm-0.14.4-1.1 on GA media

These are all security issues fixed in the vifm-0.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10929-1 weblate-5.17.1-1.1 on GA media

These are all security issues fixed in the weblate-5.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10916-1 libgphoto2-6-2.5.34-1.1 on GA media

These are all security issues fixed in the libgphoto2-6-2.5.34-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10906-1 chromedriver-148.0.7778.215-1.1 on GA media

These are all security issues fixed in the chromedriver-148.0.7778.215-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45205

Name of the Vulnerable Software and Affected Versions Cloud Hypervisor versions 21.0 through 51.1 Description A guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor chains that reuse the same head index while asynchronous block I/O such as io...

CVE-2018-25390

HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter sent to lap-peserta-perdesa-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and...

CVE-2018-25391 HaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion

HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted request that specifies the target record's id. The admin/modul/modpengurus/aksipengurus.php module=pengurus&act=hapus and...