30144 matches found
Security update for python311
This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...
OPENSUSE-SU-2026:10273-1 libudisks2-0-2.11.0-2.1 on GA media
These are all security issues fixed in the libudisks2-0-2.11.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10268-1 cockpit-356-2.1 on GA media
These are all security issues fixed in the cockpit-356-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10271-1 libjxl-devel-0.11.2-1.1 on GA media
These are all security issues fixed in the libjxl-devel-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-4259 Mattermost doesn't validate user channel membership when attaching Mattermost posts as comments to Jira issues in github.com/mattermost/mattermost-server
Mattermost doesn't validate user channel membership when attaching Mattermost posts as comments to Jira issues in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. ...
Security update for python
This update for python fixes the following issues: CVE-2025-6075: Fixed performance degradation when using os.path.expandvars bsc1252974. CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. bsc1257031 CVE-2026-0865: Fixed a...
OPENSUSE-SU-2026:10263-1 heroic-games-launcher-2.20.0-2.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed...
Umbraco Engage 安全漏洞
Umbraco Engage is an extension to the digital experience platform developed by the Danish company Umbraco. Versions of Umbraco Engage prior to 16.2.1 and 17.1.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication or authorization checks for certain AP...
OPENSUSE-SU-2026:10257-1 MozillaFirefox-148.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-148.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10265-1 qemu-10.2.1-1.1 on GA media
These are all security issues fixed in the qemu-10.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10259-1 chromedriver-145.0.7632.116-1.1 on GA media
These are all security issues fixed in the chromedriver-145.0.7632.116-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10262-1 evolution-data-server-3.58.3-2.1 on GA media
These are all security issues fixed in the evolution-data-server-3.58.3-2.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] [DSA 6148-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq -...
CLSA-2026-1772041183 grafana: Fix of 3 CVEs
rebuild with newer golang version 1.22.9-1.el92.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index...
Important: Red Hat Security Advisory: podman security update
An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Security update for python-urllib3_1
This update for python-urllib31 fixes the following issues: CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API bsc1254867. CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain bsc1254866...
freerdp security update
2:2.11.7-3 - Backport several CVE fixes Resolves: RHEL-148825, RHEL-148865, RHEL-148982...
The vulnerability of the acpi_ds_call_control_method() function in the drivers/acpi/acpica/dsmethod.c file of the ACPI driver (an extended configuration and power management interface of the Linux kernel) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the acpidscallcontrolmethod function in the driver drivers/acpi/acpica/dsmethod.c of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to the reallocation of previously freed memory. Exploiting this vulnerability could all...