[SECURITY] Fedora 45 Update: rygel-46.0-2.fc45

Rygel is a home media solution that allows you to easily share audio, video a nd pictures, and control of media player on your home network. In technical terms it is both a UPnP AV MediaServer and MediaRenderer implemented through a plug -in mechanism. Interoperability with other devices in the...

[SECURITY] Fedora 45 Update: mate-media-1.28.1-9.fc45

This package contains a few media utilities for the MATE desktop, including a volume control...

[SECURITY] Fedora 45 Update: icecast-2.4.4-29.fc45

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 45 Update: gstreamer1-plugins-good-1.28.7-2.fc45

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

PT-2026-104589

Name of the Vulnerable Software and Affected Versions wcms versions prior to 3.18.1 Description Authenticated editors can achieve remote code execution by exploiting an unvalidated path in the 'POST /api/v0/media/upload/:path' endpoint. This flaw allows the upload of .php files that the web serve...

PT-2026-104548

Name of the Vulnerable Software and Affected Versions Nelio Content – Editorial Calendar & Social Media Auto-Posting versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows...

binaryen-133-1.1 on GA media (moderate)

binaryen-133-1.1 on GA media Announcement ID: openSUSE-SU-2026:11915-1 Rating: moderate Cross-References: CVE-2025-14956 CVE-2025-14957 CVE-2026-8257 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues fix...

bind-9.20.29-1.1 on GA media (moderate)

bind-9.20.29-1.1 on GA media Announcement ID: openSUSE-SU-2026:11916-1 Rating: moderate Cross-References: CVE-2026-19033 CVE-2026-19662 CVE-2026-19666 CVE-2026-19667 CVE-2026-19668 CVE-2026-19941 CVE-2026-75029 CVE-2026-76163 CVE-2026-77119 CVE-2026-77692 CVE-2026-78301 CVE-2026-80274...

libwireshark19-4.6.9-1.1 on GA media (moderate)

libwireshark19-4.6.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11912-1 Rating: moderate Cross-References: CVE-2026-95386 CVE-2026-95387 CVE-2026-95388 CVE-2026-95389 CVE-2026-95390 CVE-2026-95391 CVE-2026-95392 CVE-2026-95393 CVE-2026-95394 CVE-2026-95395 CVE-2026-96415 CVE-2026-96416...

gnumeric-1.12.62+8-1.1 on GA media (moderate)

gnumeric-1.12.62+8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11919-1 Rating: moderate Cross-References: CVE-2026-97222 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

xdg-dbus-proxy-0.1.9-1.1 on GA media (moderate)

xdg-dbus-proxy-0.1.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11913-1 Rating: moderate Cross-References: CVE-2026-93676 CVE-2026-94422 CVSS scores: CVE-2026-93676 SUSE : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2026-93676 SUSE : 4.8...

firefox-esr-153.4.0-1.1 on GA media (moderate)

firefox-esr-153.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11917-1 Rating: moderate Cross-References: CVE-2026-100756 CVE-2026-100757 CVE-2026-100758 CVE-2026-100759 CVE-2026-100760 CVE-2026-100762 CVE-2026-100765 CVE-2026-100766 CVE-2026-100767 CVE-2026-100769 CVE-2026-100770...

amazon-ecs-init-1.107.0-1.1 on GA media (moderate)

amazon-ecs-init-1.107.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11914-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-84304 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-84304 SUSE : 7.5...

CVE-2026-23922

A flaw was found in Zabbix. A highly privileged user, such as a Super Admin, can exploit this vulnerability. By setting a malicious 'Token endpoint' in the email media OAuth configuration, the 'Client secret' can be leaked. This leads to information disclosure of sensitive credentials...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

PT-2026-105676

These are all security issues fixed in the pi-coding-agent-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11957-1 distribution-registry-3.1.1-9.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-9.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105677

These are all security issues fixed in the libpoppler-cpp3-26.09.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11970-1 pvetui-1.4.3-1.1 on GA media

These are all security issues fixed in the pvetui-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105669

These are all security issues fixed in the crane-0.22.1-2.1 package on the GA media of openSUSE Tumbleweed...