33568 matches found
sccache-0.16.0~0-2.1 on GA media (moderate)
sccache-0.16.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11206-1 Rating: moderate Cross-References: CVE-2026-41676 CVSS scores: CVE-2026-41676 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-41676 SUSE : 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N...
openSUSE 16 Security Update : alloy (openSUSE-SU-2026:21251-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21251-1 advisory. Update to version 1.17.0. Security issues fixed: - CVE-2026-25680: golang.org/x/net/html: parsing arbitrary HTML can consume excessive CPU time,...
openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:21265-1)
"The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21265-1 advisory. Changes in cadvisor: - update to 0.60.3: Move OOM watching out of the lib module into the binary lib/model: make ContainerStats sub-stats...
PT-2026-56856
Name of the Vulnerable Software and Affected Versions openexr affected versions not specified Description An unchecked integer overflow occurs in the Image::resize function. When followed by an exception, this can lead to an invalid delete operation via uninitialized pointers. Recommendations At...
PT-2026-56860
Name of the Vulnerable Software and Affected Versions FluidSynth versions prior to 2.5.6-1.1 Description A heap-based buffer overrun exists in the command handler. This occurs when a pitch bend range command is sent with an out-of-bounds channel argument, causing the system to attempt to write th...
PT-2026-56855
Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls23 and libeverest packages. Recommendations Update libmbedtls23 to version 4.2.0-1.1. Update...
PT-2026-56850
Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23-4.2.0-1.1 and libeverest-3.6.7-1.1 packages on the GA media of openSU...
PT-2026-56858
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.12 Description OpenEXR contains a NULL pointer dereference in the OpenEXRCore function exr attr set bytes. The issue occurs because the public setter validates the top-level exr attr bytes t value pointer but...
PT-2026-56857
Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.10 OpenEXR versions prior to 3.3.12 OpenEXR versions prior to 3.4.13 Description A heap out-of-bounds write exists in the Imf 4 0::SampleCountChannel::setint r, unsigned int newNumSamples function. The row-based...
PT-2026-56847
Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls2 and libeverest packages within the openSUSE Tumbleweed GA media. Recommendations Update...
PT-2026-56848
Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls23 and libeverest packages. Recommendations Update libmbedtls23 to version 4.2.0-1.1. Update...
OPENSUSE-SU-2026:11226-1 woodstox-core-7.2.1-1.1 on GA media
These are all security issues fixed in the woodstox-core-7.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11221-1 python313-sqlparse-0.5.5-2.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.5.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11212-1 go1.25-1.25.12-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.12-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11222-1 keylime-ima-policy-0.2.9+49-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.9+49-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11223-1 rustup-1.28.2~0-5.1 on GA media
These are all security issues fixed in the rustup-1.28.20-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11224-1 sccache-0.16.0~0-3.1 on GA media
These are all security issues fixed in the sccache-0.16.00-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-56845
Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23-4.2.0-1.1 and libeverest-3.6.7-1.1 packages on the GA media of openSU...
PT-2026-56859
Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.10 OpenEXR versions prior to 3.3.12 OpenEXR versions prior to 3.4.13 Description An infinite-loop issue exists in SampleCountChannel due to the roundListSizeUp function. This function rounds a sample-list size to...