28990 matches found
OPENSUSE-SU-2026:11201-1 pam-1.7.2+git12-2.1 on GA media
These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed...
This Week in Spring - July 7th, 2026
This Week in Spring - July 7th, 2026 Hi, Spring fans! Welcome to another installment of This Week in Spring! We've got a lot to cover and I've got a plane to catch so let's go! What's that over on Spring Initializr? It's JobRunr, that's what! My favorite distributed job execution engine has...
OPENSUSE-SU-2026:11202-1 python313-Protego-0.6.2-1.1 on GA media
These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-56861
Name of the Vulnerable Software and Affected Versions openSUSE Tumbleweed suricata package versions prior to 8.0.5-2.1 Description A UNIX Symbolic Link Symlink Following issue exists where the suricata user can escalate privileges to root. A symlink is a special type of file that serves as a...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related:...
PT-2026-56159
Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0 Description Excelize is a Go language library used for reading and writing Microsoft Excel spreadsheets. The library parses shared-string cell values using the strconv.Atoi function but only verifies the upper...
OPENSUSE-SU-2026:11200-1 heroic-games-launcher-2.22.0-4.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.22.0-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11197-1 apptainer-1.5.1-3.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media
These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
json-c-devel-0.19-1.1 on GA media (moderate)
json-c-devel-0.19-1.1 on GA media Announcement ID: openSUSE-SU-2026:11188-1 Rating: moderate Cross-References: CVE-2013-6370 CVE-2013-6371 CVE-2026-11322 CVE-2026-9146 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These are all...
openssl security update
3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...
PT-2026-56151
Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0 Description The checkSheet function in github.com/xuri/excelize/v2 fails to validate the XML attribute value before using it as the length argument for a slice allocation in makexlsxRow, row. This lack of...
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by HTTP request smuggling (CVE-2026-11541)
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by remote code execution and HTTP request smuggling. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator
Summary The tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinator forwards agent-supplied AllowedIPs verbatim to tunnel peers which install them into the WireGuard peer configuration. Impact A...
Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking
Summary Coder's OIDC callback checked emailverified with a direct Go bool type assertion. When an IdP returned the claim as a non-boolean for example the string "false" or omitted it, the assertion failed open and the email was treated as verified. Combined with an unconditional email-based accou...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: erlang27: erlang27-27.3.4.14-1.hum1 aarch64, x8664 erlang27-asn1-27.3.4.14-1.hum1 aarch64, x8664 erlang27-commontest-27.3.4.14-1.hum1 aarch64, x8664 erlang27-compiler-27.3.4.14-1.hum1 aarch64,...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.2: rabbitmq-server4.2-4.2.8-1.hum1 aarch64, x8664 rabbitmq-server4.2-4.2.8-1.hum1.src src...
Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...