CVE-2026-55855 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-G5XC-5W98-JFVM vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-55215 vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-55854 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-42R5-VHPQ-M858 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-CQHC-2H57-WPXF vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-55854 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-42R5-VHPQ-M858 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-G5XC-5W98-JFVM vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-55855 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-CQHC-2H57-WPXF vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-55215 vulnerabilities

Vulnerabilities for packages: sqlpad...

Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

Updated apache-mod_auth_openidc packages fix a security vulnerability

Out-of-bounds read and write in state cookie parsing. CVE-2026-54789...

Updated python-pyasn1 packages fix security vulnerabilities

The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

[SECURITY] [DSA 6488-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq -...

SUSE CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

SUSE CVE-2026-18149

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...