4270 matches found
OPENSUSE-SU-2026:10744-1 alloy-1.16.1-1.1 on GA media
These are all security issues fixed in the alloy-1.16.1-1.1 package on the GA media of openSUSE Tumbleweed...
libmodsecurity3-3.0.15-1.1 on GA media (moderate)
libmodsecurity3-3.0.15-1.1 on GA media Announcement ID: openSUSE-SU-2026:10732-1 Rating: moderate Cross-References: CVE-2026-30923 CVE-2026-42268 CVSS scores: CVE-2026-30923 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-30923 SUSE : 8.2...
go1.25-1.25.10-1.1 on GA media (moderate)
go1.25-1.25.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:10723-1 Rating: moderate Cross-References: CVE-2026-33811 CVE-2026-33814 CVE-2026-39817 CVE-2026-39819 CVE-2026-39820 CVE-2026-39823 CVE-2026-39825 CVE-2026-39826 CVE-2026-39836 CVE-2026-42499 CVE-2026-42501 Affected Products:...
OPENSUSE-SU-2026:10741-1 go1.26-1.26.3-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.3-1.1 package on the GA media of openSUSE Tumbleweed...
firefox-esr-140.10.2-1.1 on GA media (moderate)
firefox-esr-140.10.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10720-1 Rating: moderate Cross-References: CVE-2026-8090 CVE-2026-8091 CVE-2026-8092 CVE-2026-8094 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These are all...
go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak
A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
Spring AI's MilvusVectorStoredoDeleteList implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgrade to 1.0.7 or greater. Spring AI 1.1.x: affected from 1.1.0 through latest 1.1.x; upgrade to 1.1.6 o...
CVE-2026-41705
The CVE affects Spring AI MilvusVectorStore#doDelete(List) and is caused by a filter-expression injection from unsanitized document IDs. Affected are Spring AI 1.0.x (1.0.0–1.0.x); upgrade to 1.0.7+; and Spring AI 1.1.x (1.1.0–1.1.x); upgrade to 1.1.6+. CVSSv3.1 base score 8.6 (HIGH): Network acc...
OPENSUSE-SU-2026:10732-1 libmodsecurity3-3.0.15-1.1 on GA media
These are all security issues fixed in the libmodsecurity3-3.0.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10733-1 streamlink-8.4.0-1.1 on GA media
These are all security issues fixed in the streamlink-8.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10731-1 mcphost-0.34.0-1.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10735-1 tor-0.4.9.8-1.1 on GA media
These are all security issues fixed in the tor-0.4.9.8-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-37431
Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
OPENSUSE-SU-2026:10720-1 firefox-esr-140.10.2-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.10.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10736-1 libblkid-devel-2.42-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.42-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: CVE-2026-2332: In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques bsc1262115. CVE-2026-5795: Fixed JaspiAuthenticator broken access control...
PT-2026-38898
These are all security issues fixed in the copacetic-0.14.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-39326
Name of the Vulnerable Software and Affected Versions streamlink versions prior to 8.4.0 Description Streamlink's HLS and DASH parsers fail to validate the URI scheme of segment entries and other resources. A remote attacker can host a malicious .m3u8 HLS playlist or .mpd DASH manifest that lists...
nix-2.34.7-1.1 on GA media (moderate)
nix-2.34.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:10696-1 Rating: moderate Cross-References: CVE-2026-44028 CVSS scores: CVE-2026-44028 SUSE : 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...