10205 matches found
ALSA-2026:34355 Moderate: mod_http2 security, bug fix, and enhancement update
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd: Apache HTTP Server:...
PT-2026-55485
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG embeds cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by the SetUserPassword and appendPasswordOption function...
PT-2026-55484
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description In Receive mode, the software writes uploaded files to the system even when file uploads have been explicitly disabled. Recommendations Update to version 2.6.4-1.1...
PT-2026-55483
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...
OPENSUSE-SU-2026:11165-1 alloy-1.17.1-1.1 on GA media
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
ALSA-2026:34109 Important: httpd security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...
PT-2026-66343
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An issue exists in the freerdp dsp decode opus function within libfreerdp/codec/dsp.c where Stream EnsureRemainingCapacity is called on context-common.buffer despite opus decode writing decoded PCM...
OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media
These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55433
These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55486
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG fails to pin the search path in the fillDefaultParameters function within pkg/management/postgres/pool/profiles.go when opening superuser...
OPENSUSE-SU-2026:11168-1 perl-CGI-Session-4.490.0-1.1 on GA media
These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11170-1 python311-python-engineio-4.13.3-1.1 on GA media
These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.0-33.4.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.0-33.4.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.0-33.4.hum1 noarch ruby4.0-devel-4.0.0-33.4.hum1 aarch64, x8664...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
PT-2026-55175
These are all security issues fixed in the hauler-2.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11161-1 radvd-2.21-1.1 on GA media
These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11160-1 python311-pydata-sphinx-theme-0.19.0-2.1 on GA media
These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...