12,572 results · Clear filters · Feed
-
High max 8.7openSUSE-SU-2026:12149-1 1 CVE
coredns-1.14.7-3.1 on GA media
These are all security issues fixed in the coredns-1.14.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 8.9SUSE-SU-2026:4704-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 16, 2026 -
High max 8.6SUSE-SU-2026:4703-1 15 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of serv…
first Oct 16, 2026 -
High max 8.1openSUSE-SU-2026:12143-1 5 CVEs
nginx-1.31.7-1.1 on GA media
These are all security issues fixed in the nginx-1.31.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 15, 2026 -
High max 7.5openSUSE-SU-2026:12140-1 1 CVE
azure-storage-azcopy-10.32.8-2.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 15, 2026 -
High max 8.2openSUSE-SU-2026:12139-1 13 CVEs
ImageMagick-7.1.2.33-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 15, 2026 -
High max 8.8SUSE-SU-2026:24159-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Man…
first Oct 7, 2026 -
High max 7.5SUSE-SU-2026:24158-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
first Oct 7, 2026 -
High max 7.5SUSE-SU-2026:24157-1 14 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 7, 2026 -
High max 7.5SUSE-SU-2026:24153-1 1 CVE
Security update for distribution
This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762).
first Oct 6, 2026 -
High max 8.7SUSE-SU-2026:24150-1 3 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). - CVE-2026-84303: google.golang.org/grpc: …
first Oct 6, 2026 -
High max 8.7SUSE-SU-2026:24149-1 10 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). - CVE-2026-19032: deserializer for `j…
first Oct 6, 2026 -
High max 7.1SUSE-SU-2026:24145-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 6, 2026 -
High max 7.1SUSE-SU-2026:24144-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 5, 2026 -
High max 7.4SUSE-SU-2026:4677-1 3 CVEs
Security update for the Java stack
This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant (Updated to version 1.10.18): - Security issues fixed: - CVE-2021-36374: F…
-
High max 7.5openSUSE-SU-2026:12129-1 1 CVE
helm-4.3.0-5.1 on GA media
These are all security issues fixed in the helm-4.3.0-5.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
High max 7.8openSUSE-SU-2026:12128-1 2 CVEs
ghostscript-10.08.0-2.1 on GA media
These are all security issues fixed in the ghostscript-10.08.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
High max 7.5SUSE-SU-2026:24137-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 10, 2026 -
High max 8.2SUSE-SU-2026:24133-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
first Oct 9, 2026 -
High max 7.1SUSE-SU-2026:24132-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). - Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24131-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:4664-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 14, 2026 -
High max 8.5SUSE-SU-2026:4663-1 10 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
-
High max 7.5SUSE-SU-2026:4662-1 1 CVE
Security update for amazon-cloudwatch-agent
This update for amazon-cloudwatch-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594). Changes f…
-
High max 7.5SUSE-SU-2026:4661-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
-
High max 7.8SUSE-SU-2026:4653-1 1 CVE
Security update for gimp
This update for gimp fixes the following issue: - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596).
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4650-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4649-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.2SUSE-SU-2026:4648-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4647-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 7.5SUSE-SU-2026:4657-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). …
-
High max 7.7SUSE-SU-2026:4652-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 13, 2026 -
High max 7.5SUSE-SU-2026:4651-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4646-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4645-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4642-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4641-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure …
first Oct 13, 2026 -
High max 8.9openSUSE-SU-2026:12119-1 3 CVEs
python313-urllib3_1-1.26.20-8.1 on GA media
These are all security issues fixed in the python313-urllib3_1-1.26.20-8.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
High max 8.7openSUSE-SU-2026:12114-1 7 CVEs
alloy-1.20.1-1.1 on GA media
These are all security issues fixed in the alloy-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4636-1 10 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…