Most recent entries from csaf_opensuse

openSUSE-SU-2026:21985-1 — Security update for valkey

Wed, 30 Sep 2026 20:24:10 +0000

Security update for valkey

openSUSE-SU-2026:21984-1 — Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

Wed, 30 Sep 2026 17:58:26 +0000

Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

openSUSE-SU-2026:21983-1 — Security update for helm

Wed, 30 Sep 2026 17:58:26 +0000

Security update for helm

openSUSE-SU-2026:21982-1 — Security update for sccache

Wed, 30 Sep 2026 17:58:26 +0000

Security update for sccache

openSUSE-SU-2026:21980-1 — Security update for MozillaFirefox

Wed, 30 Sep 2026 13:07:26 +0000

Security update for MozillaFirefox

openSUSE-SU-2026:21977-1 — Security update for glib2

Wed, 30 Sep 2026 09:36:48 +0000

Security update for glib2

RHSA-2026:74095 — Red Hat Security Advisory: rsync security, bug fix, and enhancement update

Wed, 30 Sep 2026 21:17:52 +0000

rsync: rsync: Directory escape via TOCTOU race condition in rrsync rsync: rsync: Unauthorized File Access via Symlink Module Root rsync: rsync: Arbitrary file write via path traversal in --relative mode rsync: rsync: Arbitrary file deletion via malicious file list rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options rsync: rsync: Arbitrary File Read via Symlink Following rsync: rsync: Local Privilege Escalation via Symlink Following rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure rsync: rsync: Denial of Service via Algorithmic Complexity rsync: rsync: Heap Out-of-Bounds Write via crafted argument list rsync: rsync: Memory corruption via crafted file entries rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink rsync: rsync: Information disclosure and denial of service via crafted files-from entry rsync: rsync: Authorization bypass via `auth users` directive parsing rsync: rsync: Denial of Service via handshake stall

RHSA-2026:74001 — Red Hat Security Advisory: expat security update

Wed, 30 Sep 2026 17:37:54 +0000

expat: Expat: Denial of Service via quadratic complexity in attribute processing expat: Expat: XML Injection via Malformed UTF-16 Input

RHSA-2026:73998 — Red Hat Security Advisory: gvfs security update

Wed, 30 Sep 2026 18:16:16 +0000

gvfs: SFTP: heap-based buffer overflow in read_reply() gvfs: gvfs-admin socket ownership race permits local root

RHSA-2026:73997 — Red Hat Security Advisory: gvfs security update

Wed, 30 Sep 2026 16:21:58 +0000

gvfs: SFTP: heap-based buffer overflow in read_reply()