pocketbase-0.37.3-1.1 on GA media (moderate)

pocketbase-0.37.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10628-1 Rating: moderate Cross-References: CVE-2026-33809 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-33809

CVE-2026-33809 affects the Go TIFF decoder in golang.org/x/image/tiff. A malicious TIFF file can trigger image decoding to attempt to allocate up to 4 GiB of memory via an oversized IFD offset, leading to excessive resource consumption or an out-of-memory error. The provided connected documents c...

CVE-2026-33809 OOM from malicious IFD offset in golang.org/x/image/tiff

A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error...

Linux Distros Unpatched Vulnerability : CVE-2026-33809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an...