12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:4404-1 4 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At (bsc#1280689). - CVE-202…
first Sep 30, 2026 -
High max 7.5SUSE-SU-2026:4403-1 4 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At (bsc#1280689). - CVE-20…
first Sep 30, 2026 -
High max 8.2SUSE-SU-2026:4401-1 4 CVEs
Security update for python313
This update for python313 fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can c…
first Sep 30, 2026 -
High max 7.0SUSE-SU-2026:4400-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
first Sep 30, 2026 -
High max 8.7openSUSE-SU-2026:11931-1 2 CVEs
velero-1.18.4-1.1 on GA media
These are all security issues fixed in the velero-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:11929-1 1 CVE
rpcbind-1.2.9-3.1 on GA media
These are all security issues fixed in the rpcbind-1.2.9-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 8.1openSUSE-SU-2026:11927-1 2 CVEs
python313-litellm-1.103.0-1.1 on GA media
These are all security issues fixed in the python313-litellm-1.103.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:11926-1 3 CVEs
python313-grpcio-1.84.0-1.1 on GA media
These are all security issues fixed in the python313-grpcio-1.84.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 8.7openSUSE-SU-2026:11925-1 1 CVE
prometheus-blackbox_exporter-0.26.0-9.1 on GA media
These are all security issues fixed in the prometheus-blackbox_exporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:11923-1 2 CVEs
openai-codex-0.158.0-1.1 on GA media
These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 8.8openSUSE-SU-2026:11920-1 8 CVEs
grafana-12.4.11-1.1 on GA media
These are all security issues fixed in the grafana-12.4.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.1openSUSE-SU-2026:11918-1 6 CVEs
flatpak-1.18.4-1.1 on GA media
These are all security issues fixed in the flatpak-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:11916-1 14 CVEs
bind-9.20.29-1.1 on GA media
These are all security issues fixed in the bind-9.20.29-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 8.7openSUSE-SU-2026:11914-1 2 CVEs
amazon-ecs-init-1.107.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:23924-1 4 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56854,CVE-2026-56855,CVE-…
first Sep 18, 2026 -
High max 7.6SUSE-SU-2026:23923-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 18, 2026 -
High max 7.5SUSE-SU-2026:23912-1 20 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…
first Sep 24, 2026 -
High max 7.8SUSE-SU-2026:23911-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 23, 2026 -
High max 8.7SUSE-SU-2026:23907-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 23, 2026 -
High max 8.2SUSE-SU-2026:23906-1 7 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 23, 2026 -
High max 8.9SUSE-SU-2026:23900-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:23899-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:23894-1 20 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…
first Sep 24, 2026 -
High max 7.8SUSE-SU-2026:23893-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 23, 2026 -
High max 8.7SUSE-SU-2026:23892-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 23, 2026 -
High max 8.2SUSE-SU-2026:23891-1 7 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 23, 2026 -
High max 8.9SUSE-SU-2026:23886-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:23885-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Sep 22, 2026 -
High max 7.9SUSE-SU-2026:23884-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
High max 8.2SUSE-SU-2026:4396-1 5 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.…
first Sep 29, 2026 -
High max 8.4SUSE-SU-2026:4398-1 3 CVEs
Security update for python-pymongo
This update for python-pymongo fixes the following issues: - CVE-2026-96747: improper handling of key management endpoint values ending in `.sock` allows users with write access to the encryption key metadata to open connections to local sockets on the applic…
first Sep 29, 2026 -
High max 8.9SUSE-SU-2026:4397-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 29, 2026 -
High max 8.9SUSE-SU-2026:4395-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4394-1 12 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead t…
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:4393-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4392-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass a…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4389-1 3 CVEs
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4388-1 3 CVEs
Security update for amazon-cloudwatch-agent
This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279334). …
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:4387-1 1 CVE
Security update for corosync
This update for corosync fixes the following issue: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738).
first Sep 29, 2026 -
High max 8.8openSUSE-SU-2026:11913-1 2 CVEs
xdg-dbus-proxy-0.1.9-1.1 on GA media
These are all security issues fixed in the xdg-dbus-proxy-0.1.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026