23.03.2026 16:15 An update that can now be installed.
23.03.2026 16:15 An update that can now be installed.
23.03.2026 16:15 # Security update for runc Announcement ID: SUSE-SU-2026:0949-1 Release Date: 2026-03-20T18:09:05Z Rating: important References:
23.03.2026 09:46 An update that fixes 26 vulnerabilities is now available.
23.03.2026 09:46 An update that fixes 26 vulnerabilities is now available.
23.03.2026 09:46 Two vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface. CVE-2026-22860 Rack::Directory's path check used a string prefix match on the expanded path. A request like /../root_example/ could escape the
23.03.2026 09:46 Add a patch for several CVEs: CVE-2026-1764 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor CVE-2026-1765 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor CVE-2026-1766 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor (ID3v2.3
23.03.2026 09:46 Use after free of paging structures in EPT Xenstored DoS by unprivileged domain
23.03.2026 09:46 Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks
23.03.2026 03:15 Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of service and potentially arbitrary code execution. For the oldstable distribution , this problem has been fixed in version 1.34-2+deb12u2.
22.03.2026 20:46 Jul Blobul discovered that SPIP, a website engine for publishing, is prone to a privilege escalation vulnerability. For the stable distribution , this problem has been fixed in version 4.4.13+dfsg-0+deb13u1. We recommend that you upgrade your spip packages.
22.03.2026 14:03 Update to 146.0.7680.80 * CVE-2026-3909: Out of bounds write in Ski
22.03.2026 14:03 Remove legacy parent SciToken chaining behavior from token initialization and claim handling Harden Enforcer scope path traversal validation Clean up documentation references to parent/chained SciTokens
22.03.2026 14:03 Update to 5.12.0. This release updates the license field in the Python metadata and fixes a buffer overflow/infinite loop from indent handling.
22.03.2026 14:03 Remove legacy parent SciToken chaining behavior from token initialization and claim handling Harden Enforcer scope path traversal validation Clean up documentation references to parent/chained SciTokens
