5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2026:22959-1 6 CVEs
Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor…
first Jul 28, 2026 -
Critical max 9.6SUSE-SU-2026:3472-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…
first Aug 3, 2026 -
Critical max 9.8SUSE-SU-2026:3461-1 6 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an in…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3450-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3473-1 1 CVE
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266651). Changes for aws-iam-authenticat…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3471-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…
first Aug 3, 2026 -
Critical max 9.1SUSE-SU-2026:3440-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120: Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…
first Jul 31, 2026 -
Critical max 9.6SUSE-SU-2026:3439-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/tex…
first Jul 31, 2026 -
Critical max 9.3openSUSE-SU-2026:11436-1 4 CVEs
golang-github-prometheus-prometheus-3.13.2-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Critical max 9.6openSUSE-SU-2026:11434-1 370 CVEs
chromedriver-151.0.7922.71-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.71-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11419-1 3 CVEs
python313-GitPython-3.1.56-1.1 on GA media
These are all security issues fixed in the python313-GitPython-3.1.56-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Critical max 9.3openSUSE-SU-2026:11432-1 14 CVEs
libthrift-0_24_0-0.24.0-1.1 on GA media
These are all security issues fixed in the libthrift-0_24_0-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Critical max 9.1openSUSE-SU-2026:11410-1 1 CVE
cf-cli-8.18.4+git.0.3fcd823a1-1.1 on GA media
These are all security issues fixed in the cf-cli-8.18.4+git.0.3fcd823a1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 31, 2026 -
Critical max 9.1openSUSE-SU-2026:21497-1 5 CVEs
Security update for perl-YAML-Syck
This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - updated to 1.470.0 (1.47) [Security] - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags (rep…
first Jul 29, 2026 -
Critical max 9.1openSUSE-SU-2026:21496-1 1 CVE
Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - updated to 9.480.0 (9.48) - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every reques…
first Jul 29, 2026 -
Critical max 9.6openSUSE-SU-2026:21494-1 1 CVE
Security update for gh
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version (boo#1266618).
first Jul 29, 2026 -
Critical max 10.0
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj * GO-2…
first Jul 30, 2026 -
Critical max 9.6openSUSE-SU-2026:21500-1 2 CVEs
Security update for yq
This update for yq fixes the following issues: Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good (bsc#1267199). - update to v4.53.3 Add --ini-preserve-quotes flag for INI round-trip quote preservation. F…
first Jul 29, 2026 -
Critical max 9.6openSUSE-SU-2026:21499-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: * If the ptrace() system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO m…
first Jul 29, 2026 -
Critical max 9.6openSUSE-SU-2026:21482-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode…
first Jul 30, 2026 -
Critical max 9.1openSUSE-SU-2026:21487-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…
first Jul 30, 2026 -
Critical max 9.1openSUSE-SU-2026:21486-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…
first Jul 30, 2026 -
Critical max 9.1openSUSE-SU-2026:21481-1 9 CVEs
Security update for vexctl
This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234486). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected m…
first Jul 30, 2026 -
Critical max 9.6openSUSE-SU-2026:21480-1 3 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation (bsc#1272488). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded l…
first Jul 30, 2026 -
Critical max 9.6openSUSE-SU-2026:21476-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/te…
first Jul 29, 2026 -
Critical max 9.1openSUSE-SU-2026:21490-1 2 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues - Update to Tomcat 11.0.24 - CVE-2026-59083: Incorrect URL decoding in RewriteValve may allow security control bypass (bsc#1271397). - CVE-2026-59084: EncryptInterceptor requirements not clearly documented (…
first Jul 30, 2026 -
Critical max 9.6SUSE-SU-2026:3432-1 2 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/…
first Jul 30, 2026 -
Critical max 9.1SUSE-SU-2026:3430-1 2 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.24. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…
first Jul 30, 2026 -
Critical max 9.1openSUSE-SU-2026:21459-1 6 CVEs
Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor…
first Jul 28, 2026 -
Critical max 9.6openSUSE-SU-2026:21456-1 2 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3415-1 6 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
-
Critical max 9.1SUSE-SU-2026:3403-1 2 CVEs
Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues - CVE-2026-13401: infinite loop when parsing malformed attributes in `parserc_parse` function (bsc#1271640). - CVE-2026-57074: out-of-bounds read due to unbounded character lookahead in the `parserc_par…
first Jul 29, 2026 -
Critical max 9.6SUSE-SU-2026:3421-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugf…
-
Critical max 9.1SUSE-SU-2026:3419-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…
-
Critical max 9.1SUSE-SU-2026:3418-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…
-
Critical max 9.6SUSE-SU-2026:3417-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266656). - CVE-2026-56852: golang.org/x/text/unicod…
-
Critical max 9.6SUSE-SU-2026:3416-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugf…
-
Critical max 9.4openSUSE-SU-2026:21448-1 13 CVEs
Security update for agama-web-ui
This update for agama-web-ui fixes the following issues: - CVE-2025-7783: form-data: unsafe `Math.random()` function is used to select a boundary value for multipart form-encoded data (bsc#1246822). - CVE-2026-12143: form-data: CRLF injection via unescaped mu…
first Jul 27, 2026 -
Critical max 9.1openSUSE-SU-2026:21447-1 1 CVE
Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21
This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues: Changes in go compilers: - Switch from update-alternatives to new method. - Packaging im…
first Jul 27, 2026 -
Critical max 9.1openSUSE-SU-2026:11403-1 1 CVE
traefik2-2.11.53-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026