38581 matches found
OPENSUSE-SU-2026:11166-1 c3p0-0.14.1-1.1 on GA media
These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55485
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG embeds cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by the SetUserPassword and appendPasswordOption function...
OPENSUSE-SU-2026:11164-1 MozillaThunderbird-140.12.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-66343
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An issue exists in the freerdp dsp decode opus function within libfreerdp/codec/dsp.c where Stream EnsureRemainingCapacity is called on context-common.buffer despite opus decode writing decoded PCM...
The vulnerability of the mon_handle_auth_done() function in the net/ceph/mon_client.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
hauler-2.0.1-1.1 on GA media (moderate)
hauler-2.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11154-1 Rating: moderate Cross-References: CVE-2026-48702 CVSS scores: CVE-2026-48702 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-48702 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
PT-2026-55428
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...
perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media (moderate)
perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11158-1 Rating: moderate Cross-References: CVE-2026-56017 CVE-2026-56018 CVSS scores: CVE-2026-56017 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56017 SUSE : 8.7...
OPENSUSE-SU-2026:11170-1 python311-python-engineio-4.13.3-1.1 on GA media
These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-10654
A race condition in the Zephyr Bluetooth Classic RFCOMM host stack subsys/bluetooth/host/classic/rfcomm.c mishandles a simultaneous bidirectional session disconnect. When the local device has initiated a session teardown state BTRFCOMMSTATEDISCONNECTING, DISC sent, RTX timer armed and the connect...
CVE-2026-10654 RFCOMM session-disconnect race leaks session/L2CAP and denies further RFCOMM service in Zephyr Bluetooth Classic
A race condition in the Zephyr Bluetooth Classic RFCOMM host stack subsys/bluetooth/host/classic/rfcomm.c mishandles a simultaneous bidirectional session disconnect. When the local device has initiated a session teardown state BTRFCOMMSTATEDISCONNECTING, DISC sent, RTX timer armed and the connect...
PT-2026-55184
These are all security issues fixed in the libxreaderdocument3-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11160-1 python311-pydata-sphinx-theme-0.19.0-2.1 on GA media
These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11161-1 radvd-2.21-1.1 on GA media
These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the `alloc_choose_arg_map()` function in the `net/ceph/osdmap.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
OPENSUSE-SU-2026:11158-1 perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media
These are all security issues fixed in the perl-JavaScript-Minifier-XS-0.160.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11152-1 amfora-1.11.0-3.1 on GA media
These are all security issues fixed in the amfora-1.11.0-3.1 package on the GA media of openSUSE Tumbleweed...
PYSEC-2026-381 Langroid has a Code Injection vulnerability in TableChatAgent
Summary TableChatAgent uses pandas eval. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. PoC For example, one could prompt the Agent: Evaluate the following pandas expression on the data provided and print output:...