libtirpc-devel-1.3.8-1.1 on GA media
These are all security issues fixed in the libtirpc-devel-1.3.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Обновитесь до 1.3.8-1.1
PatchFirst · Свежие уязвимости
За последние 30 дней в Операционные системы опубликовано уязвимостей: 6454; в каталоге KEV: 4.
Уязвимостей: 160467
These are all security issues fixed in the libtirpc-devel-1.3.8-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the libsndfile-devel-1.2.2-7.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.1-2.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-7.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the google-guest-agent-20261015.00-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the go1.27-1.27.3-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the gitoxide-0.61.0-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the git-lfs-3.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the docker-compose-5.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-4.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the chromedriver-156.0.8078.47-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the ca-certificates-mozilla-2.92-2.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the brotli-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
These are all security issues fixed in the bind-9.20.30-1.1 package on the GA media of openSUSE Tumbleweed.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). Security Fix(es): * ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object() hook before applying a destination or registration policy; the hook itself performs no network request, while the documentation demonstrates an unrestricted HTTP fetch. In deployments whose integrator implements that hook as an unrestricted outbound fetch, a remote attacker who knows a valid public client identifier can make the authorization server request internal, link-local, or otherwise unintended URLs
Сопоставьте установленный стек и версии со свежими базами уязвимостей.