37612 matches found
OPENSUSE-SU-2026:11092-1 libtar-1.2.20-3.1 on GA media
These are all security issues fixed in the libtar-1.2.20-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11074-1 containerized-data-importer1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11083-1 ghc-crypton-x509-store-1.9.0-1.1 on GA media
These are all security issues fixed in the ghc-crypton-x509-store-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11101-1 python315-3.15.0~b2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0b2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11075-1 docker-stable-24.0.9_ce-18.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-18.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11071-1 chromedriver-149.0.7827.155-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed...
Astra Linux – Vulnerability in Linux
A flaw was discovered in the JFS filesystem code within the Linux kernel, which allows a local attacker to cause the system to panic by enabling the ability to set extended attributes. This can lead to memory corruption or an escalation of privileges. The most significant threat posed by this...
Astra Linux – Vulnerability in Linux
A flaw was discovered in the Linux kernel. A memory use-after-free vulnerability was identified in the perf subsystem, allowing a local attacker with permission to monitor perf events, thereby corrupting memory and potentially escalating privileges. The most significant threat of this vulnerabili...
dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service DoS condition. The lack of limits or throttling mechanisms enables an...
PT-2026-51162
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description A heap-buffer-overflow write occurs during the allocation of the AVC444 YUV buffer. A heap-buffer-overflow is a memory corruption issue where data is written beyond the boundaries of a buffer...
OPENSUSE-SU-2026:11061-1 ImageMagick-7.1.2.25-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11069-1 squid-7.6-1.1 on GA media
These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed...
alloy-1.17.0-1.1 on GA media (moderate)
alloy-1.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11053-1 Rating: moderate Cross-References: CVE-2026-25680 CVE-2026-25681 CVE-2026-33532 CVE-2026-39821 CVE-2026-39827 CVE-2026-39830 CVE-2026-39831 CVE-2026-39834 CVE-2026-44740 CVE-2026-45678 CVE-2026-45682 CVE-2026-45685...
PT-2026-51167
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1 Description When clients are launched with the non-default /cache:codec:rfx option, the software passes the desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data. However, in the gdi Bitmap...
PT-2026-52060
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x and earlier Node.js versions 24.x and earlier Node.js versions 26.0.0 through 26.3.0 Description An inconsistency in hostname matching can lead to a trust-policy bypass within multi-context mTLS mutual Transport Layer...
Security Bulletin: Dirty COW Vulnerability (CVE-2016-5195)
Question Security Bulletin: Dirty COW Vulnerability CVE-2016-5195 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All Versions","Edition":"","Line of...
engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID
A flaw was found in Engine.IO. When Engine.IO servers have WebTransport enabled, a remote attacker can craft a session ID to resolve an inherited property of the clients object during WebTransport upgrade handling. This can lead to a TypeError, resulting in a denial of service DoS for the server...
OPENSUSE-SU-2026:11059-1 lemon-3.53.2-2.1 on GA media
These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed...