12,588 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:4661-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
-
High max 7.8SUSE-SU-2026:4653-1 1 CVE
Security update for gimp
This update for gimp fixes the following issue: - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596).
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4650-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4649-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.2SUSE-SU-2026:4648-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4647-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 7.5SUSE-SU-2026:4657-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). …
-
High max 7.7SUSE-SU-2026:4652-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 13, 2026 -
High max 7.5SUSE-SU-2026:4651-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4646-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4645-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4642-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4641-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure …
first Oct 13, 2026 -
High max 8.9openSUSE-SU-2026:12119-1 3 CVEs
python313-urllib3_1-1.26.20-8.1 on GA media
These are all security issues fixed in the python313-urllib3_1-1.26.20-8.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
High max 8.7openSUSE-SU-2026:12114-1 7 CVEs
alloy-1.20.1-1.1 on GA media
These are all security issues fixed in the alloy-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4636-1 10 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
-
High max 7.0SUSE-SU-2026:24129-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
High max 8.9SUSE-SU-2026:24125-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24120-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-81870: OpenTelem…
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:4635-1 8 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
-
High max 8.2SUSE-SU-2026:4633-1 6 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overfl…
-
High max 7.5SUSE-SU-2026:24121-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). - …
first Oct 8, 2026 -
High max 7.4SUSE-SU-2026:24119-1 7 CVEs
Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: out-o…
first Oct 8, 2026 -
High max 7.8SUSE-SU-2026:24117-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch …
first Oct 8, 2026 -
High max 7.0SUSE-SU-2026:24116-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
High max 8.7openSUSE-SU-2026:12111-1 1 CVE
python313-CairoSVG-2.9.1-1.1 on GA media
These are all security issues fixed in the python313-CairoSVG-2.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.2openSUSE-SU-2026:12109-1 1 CVE
guava-33.7.2-1.1 on GA media
These are all security issues fixed in the guava-33.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.6SUSE-SU-2026:4631-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base6…
first Oct 12, 2026 -
High max 8.7SUSE-SU-2026:4628-1 9 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Oct 12, 2026 -
High max 8.2SUSE-SU-2026:4623-1 34 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
first Oct 12, 2026 -
High max 7.5openSUSE-SU-2026:12108-1 7 CVEs
ffmpeg-7-7.1.5-4.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.7openSUSE-SU-2026:12107-1 2 CVEs
amazon-ecs-init-1.108.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.108.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.6SUSE-SU-2026:4616-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base6…
first Oct 12, 2026 -
High max 8.2SUSE-SU-2026:4615-1 34 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
first Oct 12, 2026 -
High max 8.8openSUSE-SU-2026:12106-1 1 CVE
libvpx-devel-1.17.0-1.1 on GA media
These are all security issues fixed in the libvpx-devel-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 11, 2026 -
High max 8.5openSUSE-SU-2026:12105-1 12 CVEs
xwayland-24.1.13-2.1 on GA media
These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
High max 8.5openSUSE-SU-2026:12104-1 11 CVEs
xorg-x11-server-21.1.24-2.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.24-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
High max 8.2openSUSE-SU-2026:12100-1 1 CVE
expat-2.9.0-1.1 on GA media
These are all security issues fixed in the expat-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
High max 7.5openSUSE-SU-2026:12099-1 1 CVE
cyrus-sasl-2.1.28-13.1 on GA media
These are all security issues fixed in the cyrus-sasl-2.1.28-13.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
High max 7.5openSUSE-SU-2026:12096-1 1 CVE
python313-datamodel-code-generator-0.83.0-1.1 on GA media
These are all security issues fixed in the python313-datamodel-code-generator-0.83.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2026