23758 matches found
CVE-2026-42091
CVE-2026-42091 affects goshs (Go SimpleHTTPServer). Prior to v2.0.2, the PUT upload handler lacks CSRF validation (unlike POST), and the preflight OPTIONS handler uses Access-Control-Allow-Origin: *. Combined, this enables cross-origin writes of arbitrary files to a goshs instance via the victim’...
OPENSUSE-SU-2026:10670-1 avahi-0.8-43.1 on GA media
These are all security issues fixed in the avahi-0.8-43.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10686-1 libwireshark19-4.6.5-1.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10675-1 dpkg-1.22.22-1.1 on GA media
These are all security issues fixed in the dpkg-1.22.22-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-31670 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-31670 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-31672 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-31672 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
RLSA-2026:12310 Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Privilege escalation due to failu...
OESA-2026-2195 python-nbconvert security update
The nbconvert tool, jupyter nbconvert, converts notebooks to various other formats via Jinja templates. The nbconvert tool allows you to convert an .ipynb notebook file into various static formats including HTML, LaTeX, PDF, Reveal JS, Markdown md, ReStructured Text rst and executable script...
OESA-2026-2181 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...
OESA-2026-2174 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algifaead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of the associated data.\n\nThere is no...
OESA-2026-2148 pdfbox security update
Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...
OESA-2026-2150 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-2141 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-2122 systemd security update
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is...
SUSE-SU-2026:1671-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix one security issue The following security issue was fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algifaead bsc1262573...
CLSA-2026-1777451880 babel: Fix of CVE-2021-42771
CVE-2021-42771: fix directory traversal in Locale.exists/load...
CLSA-2026-1777544697 squashfs-tools: Fix of CVE-2021-40153
CVE-2021-40153: fix write outside destination directory in unsquashfs...