Umbraco Engage 安全漏洞

Umbraco Engage is an extension to the digital experience platform developed by the Danish company Umbraco. Versions of Umbraco Engage prior to 16.2.1 and 17.1.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication or authorization checks for certain AP...

OPENSUSE-SU-2026:10257-1 MozillaFirefox-148.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-148.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10265-1 qemu-10.2.1-1.1 on GA media

These are all security issues fixed in the qemu-10.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10259-1 chromedriver-145.0.7632.116-1.1 on GA media

These are all security issues fixed in the chromedriver-145.0.7632.116-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10262-1 evolution-data-server-3.58.3-2.1 on GA media

These are all security issues fixed in the evolution-data-server-3.58.3-2.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DSA 6148-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq -...

CLSA-2026-1772041183 grafana: Fix of 3 CVEs

rebuild with newer golang version 1.22.9-1.el92.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index...

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security update for python-urllib3_1

This update for python-urllib31 fixes the following issues: CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API bsc1254867. CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain bsc1254866...

freerdp security update

2:2.11.7-3 - Backport several CVE fixes Resolves: RHEL-148825, RHEL-148865, RHEL-148982...

The vulnerability of the acpi_ds_call_control_method() function in the drivers/acpi/acpica/dsmethod.c file of the ACPI driver (an extended configuration and power management interface of the Linux kernel) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acpidscallcontrolmethod function in the driver drivers/acpi/acpica/dsmethod.c of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to the reallocation of previously freed memory. Exploiting this vulnerability could all...

OPENSUSE-SU-2026:10249-1 cmctl-2.4.1-1.1 on GA media

These are all security issues fixed in the cmctl-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10256-1 regclient-0.11.2-1.1 on GA media

These are all security issues fixed in the regclient-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

389-ds-base security update

3.1.3-7 - Bump version to 3.1.3-7 - Resolves: RHEL-117764 - Replication online reinitialization of a large database gets stalled. rhel-10.1.z - Resolves: RHEL-123274 - LDAP high CPU usage while handling indexes with IDL scan limit at INTMAX rhel-10.1.z - Resolves: RHEL-123281 - The new...

PT-2026-21649

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick, software for editing and manipulating digital images, has an issue with boundary checking when processing Huffman-coded data from PCD Photo...

OPENSUSE-SU-2026:10243-1 freerdp2-2.11.7-5.1 on GA media

These are all security issues fixed in the freerdp2-2.11.7-5.1 package on the GA media of openSUSE Tumbleweed...

Mozilla多款产品 安全漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

389-ds-base security update

2.7.0-10 - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation rhel-9.7.z - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected rhel-9.7.z - Resolves: RHEL-137083 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via...

OPENSUSE-SU-2026:10241-1 cacti-1.2.30+git231.bca15e70c-1.1 on GA media

These are all security issues fixed in the cacti-1.2.30+git231.bca15e70c-1.1 package on the GA media of openSUSE Tumbleweed...

weblate-5.16-1.1 on GA media (moderate)

weblate-5.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:10240-1 Rating: moderate Cross-References: CVE-2026-21889 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the weblate-5.16-1.1...