OPENSUSE-SU-2026:11436-1 golang-github-prometheus-prometheus-3.13.2-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-13596

creationtimestamp| type| source ---|---|--- 2026-08-01 14:51:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpslqvwa22 2026-08-01 14:51:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpslxgmm2x 2026-08-01 14:51:38+00:00| seen|...

CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

EUVD-2026-51865

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

OPENSUSE-SU-2026:11420-1 python313-asteval-1.0.9-1.1 on GA media

These are all security issues fixed in the python313-asteval-1.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11430-1 librrd8-1.10.3-1.1 on GA media

These are all security issues fixed in the librrd8-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11416-1 gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11429-1 python315-3.15.0~b4-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11431-1 ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

warewulf4-4.7.0-4.1 on GA media (moderate)

warewulf4-4.7.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11404-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

PT-2026-67222

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.9 Description An attacker can trigger a Denial of Service DoS by supplying specific expressions to the asteval.Interpreter.eval function. The issue occurs because the FROM PY list in asteval/astutils.py exposes...

OPENSUSE-SU-2026:11426-1 python310-3.10.20-8.1 on GA media

These are all security issues fixed in the python310-3.10.20-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11427-1 python311-3.11.15-8.1 on GA media

These are all security issues fixed in the python311-3.11.15-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11415-1 gio-branding-upstream-2.88.3-1.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.88.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11428-1 python312-3.12.13-8.1 on GA media

These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed...

dnsdist-2.0.7-1.1 on GA media (moderate)

dnsdist-2.0.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11411-1 Rating: moderate Cross-References: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005 CVSS scores: CVE-2026-40011 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N...

CVE-2026-53599

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with mediaupload permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with...