12,588 results · Clear filters · Feed
-
High max 8.2openSUSE-SU-2026:12092-1 1 CVE
cups-filters-1.28.17-10.1 on GA media
These are all security issues fixed in the cups-filters-1.28.17-10.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2026 -
High max 8.8SUSE-SU-2026:24115-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Man…
first Oct 7, 2026 -
High max 7.1SUSE-SU-2026:24096-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 5, 2026 -
High max 7.8SUSE-SU-2026:24056-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) …
first Oct 5, 2026 -
High max 8.1SUSE-SU-2026:4611-1 3 CVEs
Security update for rsyslog
This update for rsyslog fixes the following issues: - imdtls permitted-peer authorization bypass (bsc#1281628). Changes for rsyslog: - Upgrade to version 8.2608.0 (bsc#1257604)
first Oct 9, 2026 -
High max 8.8SUSE-SU-2026:4610-1 9 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236). - CVE-2026-92162: path traversal via unvalidated `a…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:4608-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:4602-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
-
High max 7.8SUSE-SU-2026:4594-1 1 CVE
Security update for emacs
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390).
first Oct 8, 2026 -
High max 7.1SUSE-SU-2026:4590-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:4603-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
-
High max 7.5SUSE-SU-2026:4597-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). …
first Oct 8, 2026 -
High max 7.0SUSE-SU-2026:4589-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications (bsc#1271152). - CVE-2026-59947: unsanitized URL credential handling in debug output wit…
first Oct 8, 2026 -
High max 7.1SUSE-SU-2026:4588-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 8, 2026 -
High max 7.5openSUSE-SU-2026:22039-1 1 CVE
Security update for distribution
This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762).
first Oct 6, 2026 -
High max 8.7openSUSE-SU-2026:22035-1 3 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). - CVE-2026-84303: google.golang.org/grpc: …
first Oct 6, 2026 -
High max 8.7openSUSE-SU-2026:22034-1 10 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). - CVE-2026-19032: deserializer for `j…
first Oct 6, 2026 -
High max 7.1openSUSE-SU-2026:22031-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 6, 2026 -
High max 8.6openSUSE-SU-2026:12084-1 10 CVEs
libsoup-2_4-1-2.74.3-24.1 on GA media
These are all security issues fixed in the libsoup-2_4-1-2.74.3-24.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 7.8openSUSE-SU-2026:12082-1 2 CVEs
gimp-3.2.6-4.1 on GA media
These are all security issues fixed in the gimp-3.2.6-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 7.0openSUSE-SU-2026:12081-1 1 CVE
cpp15-15.3.0+git11272-2.1 on GA media
These are all security issues fixed in the cpp15-15.3.0+git11272-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 8.7openSUSE-SU-2026:12073-1 1 CVE
inspektor-gadget-0.57.0-1.1 on GA media
These are all security issues fixed in the inspektor-gadget-0.57.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
High max 7.8SUSE-SU-2026:24019-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) …
first Oct 5, 2026 -
High max 8.7SUSE-SU-2026:24014-1 16 CVEs
Security update for rustup
This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). - CVE-2026-25541: …
first Oct 2, 2026 -
High max 8.1SUSE-SU-2026:24013-1 28 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.4.18: - CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). - CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). - CVE-2026-19696: Ixia IxVeriWave and Vector In…
first Oct 2, 2026 -
High max 7.5SUSE-SU-2026:4557-1 6 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy sw…
first Oct 7, 2026 -
High max 7.1SUSE-SU-2026:4565-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 7, 2026 -
High max 8.2SUSE-SU-2026:4560-1 1 CVE
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587).
first Oct 7, 2026 -
High max 7.1SUSE-SU-2026:4587-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). - Fixed incomplete RADIUS Message-Authenticator attribute val…
-
High max 7.5SUSE-SU-2026:4568-1 2 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issues: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340). - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated…
first Oct 7, 2026 -
High max 7.1SUSE-SU-2026:4566-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 7, 2026 -
High max 7.5SUSE-SU-2026:4558-1 6 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy sw…
first Oct 7, 2026 -
High max 8.8openSUSE-SU-2026:22028-1 1 CVE
Security update for python-fsspec
This update for python-fsspec fixes the following issues: Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in `ReferenceFileSystem` (bsc#1284173)
first Oct 6, 2026 -
High max 7.8openSUSE-SU-2026:22025-1 2 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-96546: one-byte out-of-bounds heap read in the uncompressed DDS loader (bsc#1282601) - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#12825…
first Oct 6, 2026 -
High max 7.1openSUSE-SU-2026:22022-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 5, 2026 -
High max 8.7openSUSE-SU-2026:12070-1 40 CVEs
velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media
These are all security issues fixed in the velociraptor-0.76.7.0.git145.b60ef1146-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 6, 2026 -
High max 7.1openSUSE-SU-2026:12068-1 3 CVEs
podman-6.1.2-1.1 on GA media
These are all security issues fixed in the podman-6.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 6, 2026 -
High max 8.8openSUSE-SU-2026:12067-1 1 CVE
pgvector-devel-0.8.7-1.1 on GA media
These are all security issues fixed in the pgvector-devel-0.8.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 6, 2026 -
High max 7.5SUSE-SU-2026:4554-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
-
High max 7.5openSUSE-SU-2026:12062-1 1 CVE
pi-coding-agent-1.0.2-1.1 on GA media
These are all security issues fixed in the pi-coding-agent-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 5, 2026