distribution-registry-3.1.2-3.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.2-3.1 package on the GA media of openSUSE Tumbleweed.
- Mettez à jour vers 3.1.2-3.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de la pile Systèmes d’exploitation · Page n° 41
Vulnérabilités publiées pour Systèmes d’exploitation au cours des 30 derniers jours : 6549. Présentes dans le catalogue KEV : 4.
Vulnérabilités : 160146
cadvisor-0.60.6-3.1 on GA media
These are all security issues fixed in the cadvisor-0.60.6-3.1 package on the GA media of openSUSE Tumbleweed.
- Mettez à jour vers 0.60.6-3.1
Publication Mise à jourImportant: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: libX11: Heap-based buffer overflow via malicious X server (CVE-2026-88806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.8.10-1.el10_2.1
Publication Mise à jourImportant: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: libX11: Heap-based buffer overflow via malicious X server (CVE-2026-88806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.8.12-1.el9_8.1
Publication Mise à jourImportant: libXtst security update
X.Org X11 libXtst runtime library Security Fix(es): * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.2.3-8.el8_10
Publication Mise à jourModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.7.10-2.el8_10
Publication Mise à jourImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 0.9.10-8.el8_10
Publication Mise à jourImportant: libXtst security update
X.Org X11 libXtst runtime library Security Fix(es): * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.2.3-16.el9_8.1
Publication Mise à jourImportant: yggdrasil security update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing (CVE-2026-94440) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate cert
- Mettez à jour vers 0.4.9.2-1.el10_2.4
Publication Mise à jourImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 0.9.10-16.el9_8.2
Publication Mise à jourModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.7.10-8.el9_8.1
Publication Mise à jourModerate: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1.8.1-7.el10_2.1
Publication Mise à jourImportant: libXrender security update
X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 0.9.11-8.el10_2.1
Publication Mise à jourModerate: gcc-toolset-15-gcc security update
The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
gcc-toolset-15-gcc gcc-toolset-15-gcc-c++ gcc-toolset-15-gcc-gfortran gcc-toolset-15-gcc-plugin-annobin gcc-toolset-15-gcc-plugin-devel gcc-toolset-15-libasan-devel gcc-toolset-15-libatomic-devel gcc-toolset-15-libgccjit gcc-toolset-15-libgccjit-devel gcc-toolset-15-libitm-devel gcc-toolset-15-liblsan-devel gcc-toolset-15-libquadmath-develSystèmes d’exploitation- Mettez à jour vers 15.2.1-7.2.el8_10
Publication Mise à jourImportant: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privil
- Mettez à jour vers 140.17.0-1.el8_10.alma.1
Publication Mise à jourImportant: pki-deps:10.6 security update
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425) * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) * com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)
apache-commons-collections apache-commons-lang apache-commons-net bea-stax-api glassfish-fastinfoset glassfish-jaxb-api glassfish-jaxb-core glassfish-jaxb-runtime glassfish-jaxb-txw2 jackson-annotations jackson-core jackson-databindSystèmes d’exploitation- Mettez à jour vers 1.2.0-16.module_el8.5.0+2577+9e95fe00
- Mettez à jour vers 1.2.13-9.module_el8.5.0+2577+9e95fe00
- Mettez à jour vers 2.2.11-12.module_el8.10.0+3791+e0637953
- Mettez à jour vers 2.2.12-8.module_el8.5.0+2577+9e95fe00
- Mettez à jour vers 2.21-1.module_el8.10.0+4235+0924958e
- Mettez à jour vers 2.21.4-1.module_el8.10.0+4329+908ad137.1
- Mettez à jour vers 2.21.4-1.module_el8.10.0+4329+908ad137.3
- Mettez à jour vers 2.6-21.module_el8.5.0+2577+9e95fe00
- Mettez à jour vers 3.2.2-10.module_el8.5.0+2577+9e95fe00
- Mettez à jour vers 3.6-3.module_el8.5.0+2577+9e95fe00
Publication Mise à jourImportant: thunderbird security, bug fix, and enhancement update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) Bug Fix(es) and Enhancement(s): * Thunderbird ESR 153 rebase [rhel-10.2.z] (JIRA:RHEL-175207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 153.5.0-1.el10_2.alma.1
Publication Mise à jourImportant: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1:29.4-14.el10_2.4
Publication Mise à jourImportant: cjose security update
CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service (CVE-2026-53938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 0.6.1-17.el9_8.1
Publication Mise à jourImportant: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Mettez à jour vers 1:26.1-15.el8_10.4
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.