190360 matches found
OESA-2026-4287 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4286 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4284 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-4250 libX11 security update
Core X11 protocol client library. Security Fixes: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap.CVE-2026-88806 An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before...
OESA-2026-4249 libX11 security update
Core X11 protocol client library. Security Fixes: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap.CVE-2026-88806 An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before...
OESA-2026-4247 libX11 security update
Core X11 protocol client library. Security Fixes: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap.CVE-2026-88806 An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before...
OESA-2026-4248 libX11 security update
Core X11 protocol client library. Security Fixes: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap.CVE-2026-88806 An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before...
CVE-2026-109677
A flaw was found in FreeRDP. This vulnerability allows information disclosure of client heap memory to a malicious Remote Desktop Protocol RDP server when a user connects to it. Due to improper bounds checking on smartcard pattern byte counts, the server can supply crafted data that triggers...
CLSA-2026-1792144466 pcs: Fix of CVE-2025-61919
fix CVE-2025-61919: update bundled rubygem rack from 2.2.6.4 to 2.2.20, bounding the Rack::RequestPOST form body read...
CVE-2026-98405
A flaw was found in the Linux kernel's SMB Server Message Block client. When parsing POSIX security identifiers in server responses, the client fails to properly validate the server-supplied buffer length against the actual received message boundaries. A malicious or compromised SMB server could...
BIT-GITLAB-2026-84284 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect...
BIT-GITLAB-2026-16275 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks...
BIT-MYSQL-CLIENT-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...
BIT-MYSQL-CLIENT-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...
BIT-MARIADB-MIN-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...
Security update for libsoup
This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...
BIT-MARIADB-MIN-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...
BIT-MARIADB-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...
SUSE-SU-2026:4690-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...
BIT-MARIADB-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...