542441 matches found
CVE-2026-80675
In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...
dovecot24-2.4.5-1.1 on GA media (moderate)
dovecot24-2.4.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11629-1 Rating: moderate Cross-References: CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606 CVE-2026-33607 CVE-2026-40014 CVE-2026-40015 CVE-2026-40017 CVE-2026-40019 CVE-2026-40203 CVE-2026-40205...
Security update for chromium (critical)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...
Security update for dhcpcd (moderate)
openSUSE security update: security update for dhcpcd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21692-1 Rating: moderate References: bsc1268968 bsc1268974 bsc1268976 bsc1268980 Cross-References: CVE-2026-56113 CVE-2026-56115 CVE-2026-56116...
Security update for python-cryptography (moderate)
openSUSE security update: security update for python-cryptography ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21685-1 Rating: moderate References: bsc1273516 bsc1273549 bsc1273551 Cross-References: CVE-2026-69247 CVE-2026-69248 CVE-2026-69249 CV...
Security update for rav1e (low)
openSUSE security update: security update for rav1e ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21681-1 Rating: low References: bsc1249016 Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1...
jfrog-cli-2.122.0-1.1 on GA media (moderate)
jfrog-cli-2.122.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11631-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA...
istioctl-1.30.4-1.1 on GA media (moderate)
istioctl-1.30.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11630-1 Rating: moderate Cross-References: CVE-2026-48521 CVE-2026-50572 CVE-2026-73511 CVE-2026-73512 CVE-2026-73513 CVE-2026-73546 CVE-2026-73547 CVE-2026-73548 CVE-2026-73549 CVE-2026-73550 CVE-2026-73551 CVE-2026-73552...
jupyter-jupyterlab-4.5.10-1.1 on GA media (moderate)
jupyter-jupyterlab-4.5.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11634-1 Rating: moderate Cross-References: CVE-2026-73415 CVE-2026-73416 CVE-2026-73417 CVE-2026-73626 CVE-2026-73627 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...
php-composer2-2.10.3-1.1 on GA media (moderate)
php-composer2-2.10.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11633-1 Rating: moderate Cross-References: CVE-2026-59944 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration CVE-2026-74580 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In t...
Important: gimp
Issue Overview: A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed th...
Important: postgresql
Issue Overview: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the...
Important: apr-util
Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...
Important: iperf3
Issue Overview: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive...
Important: kernel6.18
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcounter: serialize reset with spinlock CVE-2026-45897 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: revert commitmutex usage in reset path CVE-2026-45901 In...
CVE-2026-82562
Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...