1,559 results · Clear filters · Feed
-
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.2
Security update for python-Brotli
This update for python-Brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779).
-
Critical max 9.2
python313-autobahn-26.11.1-1.1 on GA media
These are all security issues fixed in the python313-autobahn-26.11.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Nov 1, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Nov 1, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs24
This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char …
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
Critical max 9.8
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.52 (boo#1281123): * CVE-2026-93374: Use after free in Dawn * CVE-2026-93372: Buffer overflow in WebGL * CVE-2026-93375: Incorrect reference resolution in Tracing *…
first Oct 28, 2026 -
Critical max 9.8
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.82 (boo#1278683): * CVE-2026-85046: Type confusion in V8 * CVE-2026-85052: Out of bounds read in CrashReporting * CVE-2026-85043: Incomplete cleanup in Network * C…
first Oct 28, 2026 -
Critical max 9.9
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Changes in roundcubemail: Update to 1.6.20: This is a security update to the version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: + Fix IMAP command inject…
first Oct 27, 2026 -
Critical max 9.2
Security update for python-Brotli
This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Upda…
first Oct 29, 2026 -
Critical max 9.2
trufflehog-3.99.7-1.1 on GA media
These are all security issues fixed in the trufflehog-3.99.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptograp…
first Oct 29, 2026 -
Critical max 9.6
Security update for docker
This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…
first Oct 23, 2026 -
Critical max 9.2
ghostscript-10.08.0-3.1 on GA media
These are all security issues fixed in the ghostscript-10.08.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 28, 2026 -
High max 7.7
bun-1.4.4-1.1 on GA media
These are all security issues fixed in the bun-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 28, 2026 -
Critical max 9.2
python313-Brotli-1.2.1-1.1 on GA media
These are all security issues fixed in the python313-Brotli-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 27, 2026 -
Critical max 9.6
Security update for docker
This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…
first Oct 19, 2026 -
Critical max 9.6
Security update for docker
This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…
first Oct 23, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.4.27: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 10.0
libruby4_0-4_0-4.0.9-1.1 on GA media
These are all security issues fixed in the libruby4_0-4_0-4.0.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Critical max 9.2
brotli-1.2.1-1.1 on GA media
These are all security issues fixed in the brotli-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Critical max 9.2
corepack24-24.22.1-1.1 on GA media
These are all security issues fixed in the corepack24-24.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Critical max 9.2
matomo-5.14.2-1.1 on GA media
These are all security issues fixed in the matomo-5.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.4.27: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.2
Security update for php74
This update for php74 fixes the following issues: Fixed two security issues: - CVE-2026-109618: memory corruption leading to RCE - CVE-2026-109619: memory corruption leading to RCE
first Oct 22, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially expl…
-
Critical max 9.2
Security update for php7
This update for php7 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
-
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
-
Critical max 9.2
php8-8.5.12-1.1 on GA media
These are all security issues fixed in the php8-8.5.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.3.36: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…
first Oct 9, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…
first Oct 9, 2026 -
High max 8.8
dssim-3.5.1-1.1 on GA media
These are all security issues fixed in the dssim-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: kernel: crypto: af_alg - Di…
first Oct 14, 2026