564717 matches found
Critical: unbound
Issue Overview: In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the dige...
CVE-2026-91840
username newline injection reaches a root password helper...
ROS-20260917-73-0025
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0030
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0031
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663 kernel: netfilter: nfconntrackh323: fix OOB read in...
Security update for MozillaFirefox (important)
openSUSE security update: security update for mozillafirefox ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21853-1 Rating: important References: bsc1278001 Cross-References: CVE-2026-74952 CVE-2026-75874 CVE-2026-84118 CVE-2026-84119 CVE-2026-8412...
jq-1.8.2-2.1 on GA media (moderate)
jq-1.8.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11789-1 Rating: moderate Cross-References: CVE-2025-9403 CVSS scores: CVE-2025-9403 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2025-9403 SUSE : 1.9...
Security update for mbedtls-2 (important)
openSUSE security update: security update for mbedtls-2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21864-1 Rating: important References: bsc1245810 bsc1252454 Cross-References: CVE-2025-52496 CVE-2025-59438 CVSS scores: CVE-2025-59438 SUSE : 5....
sngrep-1.8.4-2.1 on GA media (moderate)
sngrep-1.8.4-2.1 on GA media Announcement ID: openSUSE-SU-2026:11791-1 Rating: moderate Cross-References: CVE-2026-90558 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the sngrep-1.8.4-2.1...
libcjose-devel-0.6.2.8-2.1 on GA media (moderate)
libcjose-devel-0.6.2.8-2.1 on GA media Announcement ID: openSUSE-SU-2026:11784-1 Rating: moderate Cross-References: CVE-2026-53938 CVE-2026-53939 CVSS scores: CVE-2026-53938 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-53938 SUSE : 8.8...
Angie -- worker process memory corruption when using HTTP/3
The Angie Software Team reports: When using an OpenSSL version without native HTTP/3 support 3.5.0 or earlier, if the default server for the address that accepted a regular HTTPS request also used HTTP/3 the listen directive with the quic parameter, possibly on a different port, while a server...
firefox security update
140.15.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.15.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.15.0-1 - Update to 140.15.0 ESR...
kernel security, bug fix, and enhancement update
6.12.0-211.56.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
CVE-2026-89088
heap buffer overflow in duplicatelegacyrootdir...
ROS-20260917-73-0016
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-62846
SQUID-2026:9...
ROS-20260917-73-0038
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...