137162 matches found
OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media
These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.7-0.1.hum1 aarch64, x8664 loki3.7-canary-3.7.7-0.1.hum1 aarch64, x8664 loki3.7-logcli-3.7.7-0.1.hum1 aarch64, x8664 loki3.7-3.7.7-0.1.hum1.src src...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.6: loki3.6-3.6.16-0.1.hum1 aarch64, x8664 loki3.6-canary-3.6.16-0.1.hum1 aarch64, x8664 loki3.6-logcli-3.6.16-0.1.hum1 aarch64, x8664 loki3.6-3.6.16-0.1.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.4-0.1.hum1 aarch64, x8664 libxml2-2.15.4-0.1.hum1 aarch64, x8664 libxml2-devel-2.15.4-0.1.hum1 aarch64, x8664 libxml2-static-2.15.4-0.1.hum1 aarch64, x8664...
Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-68494
Summary The following vulnerability is resolved: CVE-2026-68494 Vulnerability Details CVEID:CVE-2026-68494 DESCRIPTION: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record...
python310-3.10.20-10.1 on GA media (moderate)
python310-3.10.20-10.1 on GA media Announcement ID: openSUSE-SU-2026:11690-1 Rating: moderate Cross-References: CVE-2026-13346 CVE-2026-1703 CVE-2026-3219 CVSS scores: CVE-2026-13346 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N CVE-2026-13346 SUSE : 5.6...
OESA-2026-3663 NetworkManager security update
NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHC...
OESA-2026-3661 NetworkManager security update
NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHC...
RHSA-2026:63539 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:63538 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54874 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:54438 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:50953 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:20356 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
GHSA-5G9X-CFFV-CCJ8 vulnerabilities
Vulnerabilities for packages: firefox...
SUSE CVE-2026-65835
Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the...
SUSE CVE-2026-80768
In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...
SUSE CVE-2026-80885
In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its OOB message processing typically to respond to security challenges. Also move OOB message processing to afswq so that it's also waited for and make the OOB...
SUSE CVE-2026-85393
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
SUSE CVE-2026-85394
python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when algorithms are not explicitly restricte...