12,597 results · Clear filters · Feed
-
High max 8.2SUSE-SU-2026:4419-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
-
High max 8.2SUSE-SU-2026:4418-1 1 CVE
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587).
-
High max 8.8SUSE-SU-2026:4417-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (bsc#1281104). - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated …
-
High max 8.2SUSE-SU-2026:4414-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
-
High max 8.2SUSE-SU-2026:4413-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
-
High max 8.2SUSE-SU-2026:4412-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
-
High max 7.1openSUSE-SU-2026:11951-1 1 CVE
valkey-9.1.2-3.1 on GA media
These are all security issues fixed in the valkey-9.1.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 7.5openSUSE-SU-2026:11947-1 1 CVE
python313-sglang-0.5.20-2.1 on GA media
These are all security issues fixed in the python313-sglang-0.5.20-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 8.1openSUSE-SU-2026:11945-1 3 CVEs
jupyter-jupyterlab-4.5.11-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-4.5.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 8.0openSUSE-SU-2026:11943-1 6 CVEs
python313-Werkzeug-3.1.9-1.1 on GA media
These are all security issues fixed in the python313-Werkzeug-3.1.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 7.7openSUSE-SU-2026:11942-1 2 CVEs
cpp7-7.5.0+r278197-25.1 on GA media
These are all security issues fixed in the cpp7-7.5.0+r278197-25.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 7.0openSUSE-SU-2026:11941-1 1 CVE
cpp16-16.2.1+git9713-1.1 on GA media
These are all security issues fixed in the cpp16-16.2.1+git9713-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 7.5openSUSE-SU-2026:11939-1 1 CVE
amazon-cloudwatch-agent-1.300073.0-1.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2026 -
High max 7.7SUSE-SU-2026:23957-1 9 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.…
first Sep 29, 2026 -
High max 7.8SUSE-SU-2026:23949-1 1 CVE
Security update for emacs
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390).
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:23945-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629).
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:23943-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:23946-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:23959-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Sep 29, 2026 -
High max 7.7SUSE-SU-2026:23934-1 9 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.…
first Sep 29, 2026 -
High max 7.7SUSE-SU-2026:23929-1 9 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.…
first Sep 29, 2026 -
High max 8.2SUSE-SU-2026:4411-1 6 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overfl…
first Oct 1, 2026 -
High max 7.5SUSE-SU-2026:4410-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 1, 2026 -
High max 8.4openSUSE-SU-2026:22003-1 3 CVEs
Security update for python-pymongo
This update for python-pymongo fixes the following issues: Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds of an allocated buffer (bsc#1282845) - CVE-2026-96748: h…
first Sep 29, 2026 -
High max 7.8openSUSE-SU-2026:21988-1 20 CVEs
Security update for radare2
This update for radare2 fixes the following issues: Changes in radare2: - Update to version 6.2.2: * Analysis: new JNI plugin with typed interface tables, arm64 Swift float calling conventions, DWARF prototype linking, jump-table and switch-case fixes * Core:…
first Sep 25, 2026 -
High max 7.8openSUSE-SU-2026:21974-1 1 CVE
Security update for emacs
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390).
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21975-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21972-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629).
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21970-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).
first Sep 29, 2026 -
High max 7.7openSUSE-SU-2026:21968-1 9 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.…
first Sep 29, 2026 -
High max 8.6openSUSE-RU-2026:22002-1 1 CVE
Recommended update for tesseract-ocr
This update for tesseract-ocr fixes the following issues: Changes in tesseract-ocr: - Update tesseract-CVE-2026-88053.patch to null the adaptive template pointer arrays again and the class pruners as upstream does, fixing an abort at exit on every run and inv…
first Sep 29, 2026 -
High max 7.1openSUSE-SU-2026:21985-1 1 CVE
Security update for valkey
This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 30, 2026 -
High max 8.4openSUSE-SU-2026:21983-1 18 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…
first Sep 30, 2026 -
High max 8.7openSUSE-SU-2026:21982-1 19 CVEs
Security update for sccache
This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavi…
first Sep 30, 2026 -
High max 7.8SUSE-SU-2026:4409-1 10 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). - CVE-2026-18303: TIF File Parsing Stack-based Buffer Over…
-
High max 8.8openSUSE-SU-2026:11938-1 1 CVE
yast2-auth-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-auth-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.5openSUSE-SU-2026:11936-1 4 CVEs
python313-tokenizers-0.23.2-1.1 on GA media
These are all security issues fixed in the python313-tokenizers-0.23.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 8.4openSUSE-SU-2026:11935-1 3 CVEs
python313-pymongo-4.18.2-1.1 on GA media
These are all security issues fixed in the python313-pymongo-4.18.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.8openSUSE-SU-2026:11932-1 16 CVEs
binutils-2.47-1.1 on GA media
These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.5SUSE-SU-2026:4407-1 1 CVE
Security update for jawn
This update for jawn fixes the following issue: - CVE-2026-61814: quadratic rescan complexity in AsyncParser can cause excessive CPU resource exhaustion (bsc#1282548).
first Sep 30, 2026