11067 matches found
PT-2026-49119
Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description Gzip decompression routines process data in limited-size chunks but lack an overall limit for the total size of accumulated decompressed chunks. This allows a malicious server to consume unlimited...
OPENSUSE-SU-2026:11028-1 librav1e0_8-0.8.1-2.1 on GA media
These are all security issues fixed in the librav1e08-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11021-1 kitty-0.47.3-1.1 on GA media
These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed...
gstreamer1 -- multiple vulnerabilities
The GStreamer project reports: Multiple security issues were identified and fixed in the GStreamer framework. GStreamer-SA-2026-0030: Missing bounds checks in RTCP SDES packet parsing GStreamer-SA-2026-0031: Integer overflow and truncation in MXF demuxer GStreamer-SA-2026-0032: Out-of-bounds read...
OPENSUSE-SU-2026:11009-1 ffmpeg-7-7.1.4-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10994-1 cpp-httplib-devel-0.46.1-1.1 on GA media
These are all security issues fixed in the cpp-httplib-devel-0.46.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-51162
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description A heap-buffer-overflow write occurs during the allocation of the AVC444 YUV buffer. A heap-buffer-overflow is a memory corruption issue where data is written beyond the boundaries of a buffer...
PT-2026-51164
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description A heap-buffer-overflow write occurs in the TS Gateway RPC fragment receive process. This is caused by an uncapped bind ack max xmit frag value, which can lead to memory corruption when processin...
OPENSUSE-SU-2026:10995-1 enc-1.1.5-2.1 on GA media
These are all security issues fixed in the enc-1.1.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10993-1 apptainer-1.5.1-1.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
MGASA-2026-0187 Updated tor packages fix security issues
This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...
PT-2026-48598
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13 Description An issue exists where .repo files can contain an optional path that may lead to path traversal attacks. Path traversal is a technique that allows an attacker to access files and directories that a...
PT-2026-48599
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...
PT-2026-48609
Name of the Vulnerable Software and Affected Versions gdk-pixbuf-loader-libheif versions prior to 1.23.0-2.1 Description Security issues were identified and resolved in the gdk-pixbuf-loader-libheif package. Recommendations Update to version 1.23.0-2.1...
OPENSUSE-SU-2026:10988-1 perl-Protocol-HTTP2-1.130.0-1.1 on GA media
These are all security issues fixed in the perl-Protocol-HTTP2-1.130.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10983-1 gdk-pixbuf-loader-libheif-1.23.0-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10965-1 ack-3.10.0-1.1 on GA media
These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10974-1 python311-pypdf-6.13.0-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-48114
App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack::ConfigLoader does not include...