12,602 results · Clear filters · Feed
-
High max 7.6SUSE-SU-2026:0877-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.18: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …
first Mar 12, 2026 -
High max 7.5SUSE-SU-2026:0876-1 5 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.1 (bsc#1255111): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints (bsc#1259266). - …
first Mar 11, 2026 -
High max 7.5SUSE-SU-2026:0875-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 (bsc#1244485): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html…
first Mar 11, 2026 -
High max 7.2SUSE-SU-2026:0872-1 8 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42363: use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580). - CVE-2023-42364: use-after-free in the awk.c evaluate function (bsc#1217584). - CVE-2023-42365: use-aft…
first Mar 11, 2026 -
High max 7.5SUSE-SU-2026:0858-1 7 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020). - CVE-2025-69224: Fixed …
first Mar 10, 2026 -
High max 8.9SUSE-SU-2026:0855-1 2 CVEs
Security update for c3p0 and mchange-commons
This update for c3p0 and mchange-commons fixes the following issues: c3p0: - Security issues fixed: - CVE-2026-27830: Fixed unsafe object deserialization (bsc#1258942) - Fix the null pointer exception in the userOverridesAsString method (bsc#1259313). mchange…
-
High max 7.5openSUSE-SU-2026:10314-1 3 CVEs
traefik2-2.11.40-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.40-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 9, 2026 -
High max 7.5openSUSE-SU-2026:10313-1 2 CVEs
rclone-1.73.2-1.1 on GA media
These are all security issues fixed in the rclone-1.73.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 9, 2026 -
High max 7.0openSUSE-SU-2026:10312-1 1 CVE
python311-pymongo-4.16.0-1.1 on GA media
These are all security issues fixed in the python311-pymongo-4.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 9, 2026 -
High max 7.5openSUSE-SU-2026:10310-1 3 CVEs
go1.25-1.25.8-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 8, 2026 -
High max 7.5SUSE-SU-2026:0854-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791). - CVE-20…
first Mar 9, 2026 -
High max 8.6SUSE-SU-2026:0853-1 27 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743). - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)…
first Mar 9, 2026 -
High max 8.6SUSE-SU-2026:0852-1 31 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743). - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)…
first Mar 9, 2026 -
High max 8.6SUSE-SU-2026:0851-1 33 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743). - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)…
first Mar 9, 2026 -
High max 8.5SUSE-SU-2026:0848-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts (bsc#1258746). - CVE-2026-21863: denial of service vi…
first Mar 7, 2026 -
High max 7.6openSUSE-SU-2026:10307-1 3 CVEs
tomcat11-11.0.18-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.6openSUSE-SU-2026:10306-1 3 CVEs
tomcat10-10.1.52-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.52-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.6openSUSE-SU-2026:10305-1 3 CVEs
tomcat-9.0.115-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.115-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 8.6openSUSE-SU-2026:10304-1 1 CVE
python311-nltk-3.9.3-1.1 on GA media
These are all security issues fixed in the python311-nltk-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 8.4openSUSE-SU-2026:10303-1 1 CVE
libIex-3_4-33-3.4.6-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.5openSUSE-SU-2026:10302-1 2 CVEs
kubeshark-cli-53.1.0-1.1 on GA media
These are all security issues fixed in the kubeshark-cli-53.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.5openSUSE-SU-2026:10299-1 5 CVEs
go1.26-1.26.1-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.7openSUSE-SU-2026:10297-1 2 CVEs
coredns-1.14.2-1.1 on GA media
These are all security issues fixed in the coredns-1.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
High max 7.5SUSE-SU-2026:0840-1 1 CVE
Security update for grpc
This update for grpc fixes the following issue: - CVE-2023-33953: unbounded memory and CPU consumption in the HPACK parser leads to remote DoS (bsc#1214148).
first Mar 6, 2026 -
High max 7.5SUSE-SU-2026:0834-1 7 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-32049: denial of service attack to websocket server (bsc#1240751). - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539:…
first Mar 5, 2026 -
High max 7.9SUSE-SU-2026:0830-1 1 CVE
Security update for ocaml
This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock() can lead to arbitrary code execution (bsc#1258992).
first Mar 5, 2026 -
High max 8.4SUSE-SU-2026:0827-1 1 CVE
Security update for glibc-livepatches
This update for glibc-livepatches fixes the following issues: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256913)
first Mar 5, 2026 -
High max 8.7openSUSE-SU-2026:20320-1 17 CVEs
Security update for freerdp2
This update for freerdp2 fixes the following issues: Changes in freerdp2: - Multiple CVE fixes: CVE-2026-24491, bsc#1257981, CVE-2026-24675, bsc#1257982, CVE-2026-24676, bsc#1257983, CVE-2026-24679, bsc#1257986, CVE-2026-24681, bsc#1257988, CVE-2026-24682, bs…
first Mar 4, 2026 -
High max 8.8SUSE-SU-2026:0814-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.112.3: * CVE-2026-2781: Avoid integer overflow in platform-independent ghash (bsc#1258568)
-
High max 8.8SUSE-SU-2026:0813-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.112.3: * CVE-2026-2781: Avoid integer overflow in platform-independent ghash (bsc#1258568)
-
High max 7.5SUSE-SU-2026:0802-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2024-7592: excess CPU resource consumption in http.cookies module (bsc#1229596)
first Mar 4, 2026 -
High max 7.9SUSE-SU-2026:0800-1 1 CVE
Security update for ocaml
This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock() can lead to arbitrary code execution (bsc#1258992).
first Mar 4, 2026 -
High max 8.0SUSE-SU-2026:20535-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057). - CVE-2025-58060: …
first Mar 2, 2026 -
High max 7.5SUSE-SU-2026:20529-1 5 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion. (bsc#1252555) - CVE-2025-32049: Fixed a Denial of Service attack to websocket server. (bsc#1240751) - CVE-…
first Mar 2, 2026 -
High max 8.0SUSE-SU-2026:20528-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057). - CVE-2025-58060: …
first Mar 2, 2026 -
High max 7.5SUSE-SU-2026:0774-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2024-7592: uncontrolled CPU resource consumption when in http.cookies module (bsc#1229596).
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0771-1 4 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.17 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: int…
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0770-1 4 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.17 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: int…
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0769-1 1 CVE
Security update for postgresql18
This update for postgresql18 fixes the following issue: Update to version 18.3 (bsc#1258754). Regression fixes: - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database …
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0768-1 4 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.22 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: int…
first Mar 3, 2026