SUSE-SU-2026:22159-1 Security update for distribution

This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265788. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation...

MINI-QHVW-2VV4-CRP2

Bulletin has no description...

CVE-2026-12529

creationtimestamp| type| source ---|---|--- 2026-06-17 22:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf3ha6tj2k...

CVE-2026-55196

creationtimestamp| type| source ---|---|--- 2026-06-17 21:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbah6mma2f 2026-06-22 00:31:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3xbtzo2m...

CVE-2026-8673

creationtimestamp| type| source ---|---|--- 2026-06-17 21:19:15+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojaidpcwb2j...

CVE-2025-32748

creationtimestamp| type| source ---|---|--- 2026-06-17 18:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiw4z3z2f2b...

CVE-2026-53840

creationtimestamp| type| source ---|---|--- 2026-06-17 18:11:20+00:00| seen| https://gist.github.com/alon710/419f4d41351693c7c60ff49637269f97 2026-06-18 20:02:03+00:00| seen| https://gist.github.com/alon710/4e321e5dcf74a8eaf0f99d54a40035e9...

CVE-2024-33909

creationtimestamp| type| source ---|---|--- 2026-06-17 15:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moilpmljvs27...

MINI-J58W-92R7-MHJG

Bulletin has no description...

Insertion of Sensitive Information into Log File

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the error handling process for certain API and WebSocket routes, where unsanitized exception...

CVE-2026-49068

creationtimestamp| type| source ---|---|--- 2026-06-17 13:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moiemgb6lj2c...

RLSA-2026:26323 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 For more details about the security issues, including the impact, a CVSS...

RLSA-2026:26205 Important: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...

postfix security update

An update is available for postfix. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The postfix packages provide a Mail Transport Agent MTA, which supports...

Authentication Bypass

Spring Web Services is vulnerable to Authentication Bypass. The vulnerability is due to X509AuthenticationProvider issuing a fully authenticated X509AuthenticationToken based solely on certificate-to-user mapping, without enforcing standard account status checks such as disabled, locked, expired,...

RLSA-2026:25932 Important: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...

CVE-2026-46919

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-19 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3momoh54d4q2e...

CVE-2026-35268

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 00:37:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mojlk4nsfv2z...

CVE-2026-54069

creationtimestamp| type| source ---|---|--- 2026-06-17 04:18:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54069.yaml 2026-07-10 19:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwdmy6ok2t 2026-07-10...

SUSE CVE-2026-46715

Flask-Security-Too allows users to add security features to their Flask applicationa. Version 5.8.0's OAuth reauthentication flow can mark a session as fresh after verifying an OAuth account that belongs to a different user. If an attacker can operate an already-authenticated but stale victim...