SUSE-SU-2026:20122-1 Security update for go1.24

This update for go1.24 fixes the following issues: Update to go1.24.12 released 2026-01-15 bsc1236217 Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level bsc1256821. - CVE-2025-68119: cmd/go: unexpected code execution when invoking...

The vulnerability of the os_unix.c component of the SQLite database management system allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the osunix.c component of the SQLite database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `os/unix/ngx_files.c` component of the NGINX application monitoring and management platform allows a attacker to cause a service failure.

The vulnerability in the os/unix/ngxfiles.c component of the NGINX application monitoring and management platform is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2016-4450: NULL Pointer Dereference

os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...

PT-2016-3355

Name of the Vulnerable Software and Affected Versions nginx versions 1.10.0 through 1.10.1 nginx versions 1.11.x before 1.11.1 Description The issue is related to a NULL pointer dereference in the os/unix/ngx files.c component of the nginx platform. This can be exploited by a remote attacker to...