distribution-registry-3.1.2-3.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.2-3.1 package on the GA media of openSUSE Tumbleweed.
- Actualiza a 3.1.2-3.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de la pila Sistemas operativos · Página 41
Vulnerabilidades publicadas para Sistemas operativos en los últimos 30 días: 6549. Incluidas en el catálogo KEV: 4.
Vulnerabilidades: 160146
cadvisor-0.60.6-3.1 on GA media
These are all security issues fixed in the cadvisor-0.60.6-3.1 package on the GA media of openSUSE Tumbleweed.
- Actualiza a 0.60.6-3.1
Publicación ActualizaciónImportant: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: libX11: Heap-based buffer overflow via malicious X server (CVE-2026-88806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.8.10-1.el10_2.1
Publicación ActualizaciónImportant: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: libX11: Heap-based buffer overflow via malicious X server (CVE-2026-88806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.8.12-1.el9_8.1
Publicación ActualizaciónImportant: libXtst security update
X.Org X11 libXtst runtime library Security Fix(es): * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.2.3-8.el8_10
Publicación ActualizaciónModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.7.10-2.el8_10
Publicación ActualizaciónImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 0.9.10-8.el8_10
Publicación ActualizaciónImportant: libXtst security update
X.Org X11 libXtst runtime library Security Fix(es): * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.2.3-16.el9_8.1
Publicación ActualizaciónImportant: yggdrasil security update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing (CVE-2026-94440) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate cert
- Actualiza a 0.4.9.2-1.el10_2.4
Publicación ActualizaciónImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 0.9.10-16.el9_8.2
Publicación ActualizaciónModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.7.10-8.el9_8.1
Publicación ActualizaciónModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1.8.1-7.el10_2.1
Publicación ActualizaciónImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 0.9.11-8.el10_2.1
Publicación ActualizaciónModerate: gcc-toolset-15-gcc security update
The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
gcc-toolset-15-gcc gcc-toolset-15-gcc-c++ gcc-toolset-15-gcc-gfortran gcc-toolset-15-gcc-plugin-annobin gcc-toolset-15-gcc-plugin-devel gcc-toolset-15-libasan-devel gcc-toolset-15-libatomic-devel gcc-toolset-15-libgccjit gcc-toolset-15-libgccjit-devel gcc-toolset-15-libitm-devel gcc-toolset-15-liblsan-devel gcc-toolset-15-libquadmath-develSistemas operativos- Actualiza a 15.2.1-7.2.el8_10
Publicación ActualizaciónImportant: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privil
- Actualiza a 140.17.0-1.el8_10.alma.1
Publicación ActualizaciónImportant: pki-deps:10.6 security update
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425) * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) * com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)
apache-commons-collections apache-commons-lang apache-commons-net bea-stax-api glassfish-fastinfoset glassfish-jaxb-api glassfish-jaxb-core glassfish-jaxb-runtime glassfish-jaxb-txw2 jackson-annotations jackson-core jackson-databindSistemas operativos- Actualiza a 1.2.0-16.module_el8.5.0+2577+9e95fe00
- Actualiza a 1.2.13-9.module_el8.5.0+2577+9e95fe00
- Actualiza a 2.2.11-12.module_el8.10.0+3791+e0637953
- Actualiza a 2.2.12-8.module_el8.5.0+2577+9e95fe00
- Actualiza a 2.21-1.module_el8.10.0+4235+0924958e
- Actualiza a 2.21.4-1.module_el8.10.0+4329+908ad137.1
- Actualiza a 2.21.4-1.module_el8.10.0+4329+908ad137.3
- Actualiza a 2.6-21.module_el8.5.0+2577+9e95fe00
- Actualiza a 3.2.2-10.module_el8.5.0+2577+9e95fe00
- Actualiza a 3.6-3.module_el8.5.0+2577+9e95fe00
Publicación ActualizaciónImportant: thunderbird security, bug fix, and enhancement update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) Bug Fix(es) and Enhancement(s): * Thunderbird ESR 153 rebase [rhel-10.2.z] (JIRA:RHEL-175207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 153.5.0-1.el10_2.alma.1
Publicación ActualizaciónImportant: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1:29.4-14.el10_2.4
Publicación ActualizaciónImportant: cjose security update
CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service (CVE-2026-53938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 0.6.1-17.el9_8.1
Publicación ActualizaciónImportant: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Actualiza a 1:26.1-15.el8_10.4
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.