12,597 results · Clear filters · Feed
-
High max 8.1openSUSE-SU-2026:11912-1 19 CVEs
libwireshark19-4.6.9-1.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.0openSUSE-SU-2026:11910-1 1 CVE
libvlc5-3.0.24-1.1 on GA media
These are all security issues fixed in the libvlc5-3.0.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.5openSUSE-SU-2026:11902-1 1 CVE
python313-Flask-3.1.3-3.1 on GA media
These are all security issues fixed in the python313-Flask-3.1.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.1openSUSE-SU-2026:11897-1 1 CVE
libXtst-devel-1.2.5-2.1 on GA media
These are all security issues fixed in the libXtst-devel-1.2.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11889-1 1 CVE
emacs-31.1-4.1 on GA media
These are all security issues fixed in the emacs-31.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:23726-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 7.8SUSE-SU-2026:23724-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
High max 7.1SUSE-SU-2026:23705-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 7.8SUSE-SU-2026:23675-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 12, 2026 -
High max 7.5SUSE-SU-2026:23614-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 3, 2026 -
High max 7.1SUSE-SU-2026:23604-1 11 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in `unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428). - CVE-2026-59184: out-…
first Sep 2, 2026 -
High max 7.8SUSE-SU-2026:23603-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…
first Sep 2, 2026 -
High max 7.2SUSE-SU-2026:23602-1 10 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 21, 2026 -
High max 8.8SUSE-SU-2026:23601-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: malicious or MiTM VNC servers can force a connecting `libvncclient` to write attacker-controlled data past the end of a framebuffer, which can lead to a crash or arbitrary code executio…
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:23597-1 3 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via `ares_getaddrinfo()` over TCP (bsc#1270416). - CVE-2026-69184: CPU exhaustion denial …
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:23593-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:23591-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763). …
first Aug 31, 2026 -
High max 7.8SUSE-SU-2026:23589-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:23585-1 3 CVEs
Security update for openssl-3-x86_64-v3-livepatches
This update for openssl-3-x86_64-v3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271713, bsc#1271712). - CVE-2026-14457: RPK server signature algorith…
first Aug 31, 2026 -
High max 8.8SUSE-SU-2026:23582-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8SUSE-SU-2026:23580-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.7openSUSE-SU-2026:11911-1 2 CVEs
wait4x-3.7.2-1.1 on GA media
These are all security issues fixed in the wait4x-3.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.5openSUSE-SU-2026:11901-1 11 CVEs
php8-8.5.11-1.1 on GA media
These are all security issues fixed in the php8-8.5.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 8.8openSUSE-SU-2026:11900-1 1 CVE
mistral-vibe-2.25.8-1.1 on GA media
These are all security issues fixed in the mistral-vibe-2.25.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.4openSUSE-SU-2026:11895-1 7 CVEs
libXi-devel-1.8.3-2.1 on GA media
These are all security issues fixed in the libXi-devel-1.8.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11891-1 1 CVE
gpsd-3.27.5-4.1 on GA media
These are all security issues fixed in the gpsd-3.27.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11890-1 4 CVEs
gimp-3.2.6-3.1 on GA media
These are all security issues fixed in the gimp-3.2.6-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 8.7SUSE-SU-2026:23730-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278270). - CVE-2026-84304: …
first Sep 9, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
High max 7.5SUSE-SU-2026:23715-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
High max 7.8SUSE-SU-2026:23704-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
High max 7.5SUSE-SU-2026:23695-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
High max 7.1SUSE-SU-2026:23670-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 7.2SUSE-SU-2026:23659-1 3 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:23656-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
High max 7.2SUSE-SU-2026:23643-1 3 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:23639-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
High max 7.7SUSE-SU-2026:23635-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).
first Sep 6, 2026 -
High max 8.8SUSE-SU-2026:23579-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026