php8-8.5.12-1.1 on GA media
These are all security issues fixed in the php8-8.5.12-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 8.5.12-1.1
Published Updated
PatchFirst · Latest vulnerabilities
Operating systems stack vulnerabilities · Page 105
Vulnerabilities published for Operating systems in the last 30 days: 6449. Listed in the KEV catalogue: 4.
Vulnerabilities: 160426
perl-Text-CSV_XS-1.650.0-1.1 on GA media
These are all security issues fixed in the perl-Text-CSV_XS-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 1.650.0-1.1
Published Updatedperl-Cpanel-JSON-XS-4.800.0-1.1 on GA media
These are all security issues fixed in the perl-Cpanel-JSON-XS-4.800.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 4.800.0-1.1
Published Updatedowntone-29.3-1.1 on GA media
These are all security issues fixed in the owntone-29.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 29.3-1.1
Published Updatedlibmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 on GA media
These are all security issues fixed in the libmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 package on the GA media of openSUSE Tumbleweed.
- Update to 0.8.9.0+git20170610.f6dd59a-4.1
Published Updatedkyverno-1.19.2-1.1 on GA media
These are all security issues fixed in the kyverno-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 1.19.2-1.1
Published Updatedibus-typing-booster-2.31.2-1.1 on GA media
These are all security issues fixed in the ibus-typing-booster-2.31.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 2.31.2-1.1
Published Updatedgo1.26-1.26.10-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 1.26.10-1.1
Published Updatedfirefox-esr-153.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 153.5.1-1.1
Published Updatedcramfs-tools-2.2-1.1 on GA media
These are all security issues fixed in the cramfs-tools-2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 2.2-1.1
Published Updatedcoredns-1.15.0-1.1 on GA media
These are all security issues fixed in the coredns-1.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Update to 1.15.0-1.1
Published Updatedamazon-cloudwatch-agent-1.300073.0-3.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Update to 1.300073.0-3.1
Published UpdatedImportant: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) * kernel: inet: frags: strip GSO state from fragments before reassembly (CVE-2026-80590) * kernel: vfio/pci:
bpftool kernel kernel-abi-stablelists kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-modules kernel-debug-modules-extra kernel-devel kernel-docOperating systems- Update to 4.18.0-553.177.1.el8_10
Published UpdatedImportant: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) * kernel: inet: frags: strip GSO state from fragments
kernel-rt kernel-rt-core kernel-rt-debug kernel-rt-debug-core kernel-rt-debug-devel kernel-rt-debug-modules kernel-rt-debug-modules-extra kernel-rt-devel kernel-rt-modules kernel-rt-modules-extraOperating systems- Update to 4.18.0-553.177.1.rt7.518.el8_10
Published UpdatedImportant: php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpm php-gdOperating systems PHP- Update to 8.0.30-8.el9_8.1
Published UpdatedImportant: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
qt5-qtbase qt5-qtbase-common qt5-qtbase-devel qt5-qtbase-examples qt5-qtbase-gui qt5-qtbase-mysql qt5-qtbase-odbc qt5-qtbase-postgresql qt5-qtbase-private-devel qt5-qtbase-staticOperating systems- Update to 5.15.9-11.el9_8.2
Published UpdatedImportant: php:7.4 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Out-of-bounds read via empty HTTP redirect Location header (CVE-2026-93682) * php: PHP: Archive entry injection via integer overflow in TAR parser (CVE-2026-6103) * php: PHP: Denial of Service via heap buffer overflow in SOAP client (CVE-2025-14181) * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: php: Credential disclosure via cross-origin HTTP redirects (CVE-2026-91766) * php: php: Information disclosure via crafted TLS server certificate (CVE-2026-91767) * php: p
apcu-panel libzip libzip libzip libzip-devel libzip-devel libzip-devel libzip-tools libzip-tools php php-bcmath php-cliOperating systems PHP- Update to 1.6.1-1.module_el8.10.0+3935+28808425
- Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
- Update to 1.6.1-1.module_el8.6.0+3239+bedf0508
- Update to 5.1.18-1.module_el8.6.0+2750+78feabcb
- Update to 7.4.33-8.module_el8.10.0+4321+cf5fd4bb
Published UpdatedImportant: php:8.3 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
apcu-panel php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpmOperating systems PHP- Update to 5.1.23-1.module_el9.6.0+151+5f31e576
- Update to 8.3.36-1.module_el9.8.0+330+fdc30075
Published UpdatedImportant: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
apcu-panel libzip libzip-devel libzip-tools php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embeddedOperating systems PHP- Update to 1.7.3-1.module_el8.10.0+3796+30ed3ef7
- Update to 5.1.23-1.module_el8.10.0+3796+30ed3ef7
- Update to 8.2.35-1.module_el8.10.0+4323+fc907035
Published UpdatedImportant: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
apcu-panel php-pecl-apcu php-pecl-apcu-devel php-pecl-rrd php-pecl-xdebug3 php-pecl-zipOperating systems- Update to 1.22.3-1.module_el9.4.0+65+49ff6472
- Update to 2.0.3-4.module_el9.4.0+65+49ff6472
- Update to 3.2.2-2.module_el9.4.0+65+49ff6472
- Update to 5.1.23-1.module_el9.4.0+65+49ff6472
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.