38550 matches found
OPENSUSE-SU-2026:11463-1 libXfont2-2-2.0.7-3.1 on GA media
These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the sprd_adi_probe() function in the drivers/spi/spi-sprd-adi.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sprdadiprobe function in the drivers/spi/spi-sprd-adi.c file of the Linux operating system’s SPI device driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the nfc_unregister_device() function in the net/nfc/core.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
The vulnerabilities in the functions ac97_adapter_release(), ac97_add_adapter(), and snd_ac97_controller_register() of the sound/ac97/bus.c module of the Linux kernel sound subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions ac97adapterrelease, ac97addadapter, and sndac97controllerregister in the sound/ac97/bus.c module of the Linux kernel audio subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the tegra_qspi_combined_seq_xfer() function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
OPENSUSE-SU-2026:11464-1 python313-Django-6.0.8-1.1 on GA media
These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the jfs_iget() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the nr_route_frame() function in the net/netrom/nr_route.c module, which is part of the networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
The vulnerability of the damon_sysfs_context_add_dirs() function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the `efivar_entry_get()` function in the `fs/efivarfs/vars.c` file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the efivarentryget function in the fs/efivarfs/vars.c file of the Linux kernel file system is related to deficiencies in error handling. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the xfrm6_get_saddr() function in the net/ipv6/xfrm6_policy.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...
OPENSUSE-SU-2026:11468-1 python313-cryptography-50.0.0-1.1 on GA media
These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)
azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...
micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests
A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC gRPC Remote Procedure Call requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...
OPENSUSE-SU-2026:11455-1 libvirt-12.6.0-1.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-1.1 package on the GA media of openSUSE Tumbleweed...