CVE-2026-3442 vulnerabilities

Vulnerabilities for packages: binutils...

SUSE CVE-2026-31323

unknown...

SUSE CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

SUSE CVE-2026-48809

python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python-engineio server in which the size of incoming messages is not checked before the messages are loaded into memory. An attacker can take...

CVE-2026-12912

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

GHSA-R8MH-X5QV-7GG2 vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-R8MH-X5QV-7GG2 vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2026-55622

security update...

CVE-2026-48750

security update...

CVE-2026-48003

ui/vnc: fix OOB read updating VNC update frequency stats...

CVE-2026-8343

ui: fix validation of VNC extended clipboard data length...

CVE-2026-55689 vulnerabilities

Vulnerabilities for packages: grafana...

SUSE CVE-2026-13412

unknown...

GHSA-2CW7-V8FF-P88R vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-53WW-G6WP-VWP6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-3000 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-46602 vulnerabilities

Vulnerabilities for packages: filebrowser, mattermost, hugo, rclone, seaweedfs, mailpit, hugo-extended...

GHSA-PWFV-328H-75X9 vulnerabilities

Vulnerabilities for packages: filebrowser, mattermost, hugo, rclone, seaweedfs, mailpit, hugo-extended...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-pulsar, druid, confluent-kafka, tez, zookeeper, kafka...

mysql security update

8.0.46-1 - Rebase to 8.0.46 8.0.45-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files...