Свежие уязвимости · Страница 128

python313-virtualenv-21.15.1-1.1 on GA media

These are all security issues fixed in the python313-virtualenv-21.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 21.15.1-1.1

python313-filelock-4.2.4-1.1 on GA media

These are all security issues fixed in the python313-filelock-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 4.2.4-1.1

podman-6.1.4-1.1 on GA media

These are all security issues fixed in the podman-6.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 6.1.4-1.1

chezdav-3.2-1.1 on GA media

These are all security issues fixed in the chezdav-3.2-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.2-1.1

perl-YAML-1.321.0-2.1 on GA media

These are all security issues fixed in the perl-YAML-1.321.0-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.321.0-2.1

perl-Spreadsheet-XLSX-0.200.0-1.1 on GA media

These are all security issues fixed in the perl-Spreadsheet-XLSX-0.200.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.200.0-1.1

ggml-devel-0.8.0-1.1 on GA media

These are all security issues fixed in the ggml-devel-0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.8.0-1.1

libsoup-3_0-0-3.8.1-1.1 on GA media

These are all security issues fixed in the libsoup-3_0-0-3.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.8.1-1.1

librsvg-2-2-2.63.4-1.1 on GA media

These are all security issues fixed in the librsvg-2-2-2.63.4-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 2.63.4-1.1

glib-networking-2.90.1-1.1 on GA media

These are all security issues fixed in the glib-networking-2.90.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 2.90.1-1.1

fltk-devel-1.3.11-2.1 on GA media

These are all security issues fixed in the fltk-devel-1.3.11-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.3.11-2.1

epiphany-51.1-1.1 on GA media

These are all security issues fixed in the epiphany-51.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 51.1-1.1

diun-4.33.1-1.1 on GA media

These are all security issues fixed in the diun-4.33.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 4.33.1-1.1

chromedriver-156.0.8078.73-1.1 on GA media

These are all security issues fixed in the chromedriver-156.0.8078.73-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 156.0.8078.73-1.1

azure-storage-azcopy-10.34.1-2.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.34.1-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 10.34.1-2.1

aws-c-mqtt-bin-0.16.2-2.1 on GA media

These are all security issues fixed in the aws-c-mqtt-bin-0.16.2-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.16.2-2.1

ImageMagick-7.1.2.34-3.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.34-3.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 7.1.2.34-3.1

Critical: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393) * pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVE-2026-112398) * pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE (CVE-2026-112900) For more details

• Обновитесь до 5.1.1-36.el8_10

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630) * bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300) * bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888) * bind

• Обновитесь до 32:9.18.29-14.el9_8.12

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.