pocketbase-0.37.3-1.1 on GA media (moderate)

pocketbase-0.37.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10628-1 Rating: moderate Cross-References: CVE-2026-33809 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-33809 vulnerabilities

Vulnerabilities for packages: hugo-extended, mattermost, seaweedfs, rclone, ollama, mailpit, hugo...

CVE-2026-33809

creationtimestamp| type| source ---|---|--- 2026-03-25 21:27:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvzs7g4ex2d...

CVE-2026-33809

The golang.org/x/image/tiff library in the Go programming language is vulnerable to an out-of-memory error or excessive resource consumption. A maliciously crafted TIFF file can cause the image decoding process to attempt to allocate up to 4GiB of memory . This flaw is related to the unlimited lo...

CVE-2026-33809 OOM from malicious IFD offset in golang.org/x/image/tiff

A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error...

Linux Distros Unpatched Vulnerability : CVE-2026-33809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an...