12,597 results · Clear filters · Feed
-
High max 8.7openSUSE-SU-2026:21886-1 3 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279274). - CVE-2026-84304…
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21884-1 5 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278681). - CVE-2026-71556: github.com/go-git/go-git/v5: a…
first Sep 20, 2026 -
High max 8.7openSUSE-SU-2026:21882-1 8 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…
first Sep 19, 2026 -
High max 8.7openSUSE-SU-2026:21879-1 7 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authenticat…
first Sep 18, 2026 -
High max 8.1openSUSE-SU-2026:21878-1 8 CVEs
Security update for ruby3.4
This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016). - CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#12…
first Sep 18, 2026 -
High max 8.8openSUSE-SU-2026:21875-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
first Sep 18, 2026 -
High max 8.6openSUSE-SU-2026:11887-1 9 CVEs
libtesseract5-5.5.3-2.1 on GA media
These are all security issues fixed in the libtesseract5-5.5.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 7.4openSUSE-SU-2026:11884-1 3 CVEs
pi-coding-agent-0.87.1-1.1 on GA media
These are all security issues fixed in the pi-coding-agent-0.87.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 8.7openSUSE-SU-2026:11881-1 1 CVE
kubectl-cnpg-1.30.1-1.1 on GA media
These are all security issues fixed in the kubectl-cnpg-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:11878-1 2 CVEs
jackson-dataformat-cbor-2.18.11-1.1 on GA media
These are all security issues fixed in the jackson-dataformat-cbor-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:11877-1 5 CVEs
jackson-databind-2.18.11-1.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:11876-1 3 CVEs
jackson-core-2.18.11-1.1 on GA media
These are all security issues fixed in the jackson-core-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 8.8openSUSE-SU-2026:11874-1 1 CVE
goose-1.51.0-1.1 on GA media
These are all security issues fixed in the goose-1.51.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 8.8openSUSE-SU-2026:11873-1 2 CVEs
flatpak-1.18.3-1.1 on GA media
These are all security issues fixed in the flatpak-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 8.7openSUSE-SU-2026:11871-1 4 CVEs
cosign-3.1.3-1.1 on GA media
These are all security issues fixed in the cosign-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
High max 7.8openSUSE-SU-2026:21959-1 11 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233) - CVE-2026-18301: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnera…
first Sep 24, 2026 -
High max 7.8openSUSE-SU-2026:21958-1 1 CVE
Security update for haveged
This update for haveged fixes the following issues: Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket (bsc#1264086).
first Sep 24, 2026 -
High max 8.6openSUSE-SU-2026:21957-1 9 CVEs
Security update for tesseract-ocr
This update for tesseract-ocr fixes the following issues: Changes in tesseract-ocr: - Update to version 5.5.3 (sync with Factory): * CVE-2026-73067: heap out-of-bounds read in SquishedDawg on crafted model (boo#1275623) * CVE-2026-88047: stack buffer overflow…
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:11863-1 1 CVE
perl-XS-Parse-Keyword-0.500.0-1.1 on GA media
These are all security issues fixed in the perl-XS-Parse-Keyword-0.500.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
High max 7.9openSUSE-SU-2026:11870-1 4 CVEs
libblkid-devel-2.42.3-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.42.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
High max 7.5openSUSE-SU-2026:11861-1 1 CVE
obs-service-cargo-7.2.2-3.1 on GA media
These are all security issues fixed in the obs-service-cargo-7.2.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
High max 8.7openSUSE-SU-2026:11856-1 1 CVE
ansible-lint-26.9.0-1.1 on GA media
These are all security issues fixed in the ansible-lint-26.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
High max 7.1openSUSE-SU-2026:11855-1 1 CVE
PackageKit-1.4.0-1.1 on GA media
These are all security issues fixed in the PackageKit-1.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
High max 8.7SUSE-SU-2026:4308-1 6 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278666). - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel…
first Sep 23, 2026 -
High max 8.4SUSE-SU-2026:4309-1 5 CVEs
Security update for gimp
This update for gimp fixes the following issues: Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: arbitrary code execution in PSD plugin due to unsigned underflow (b…
first Sep 23, 2026 -
High max 7.0SUSE-SU-2026:23849-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
first Sep 20, 2026 -
High max 7.0SUSE-SU-2026:4296-1 3 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53613: Loca…
-
High max 7.0SUSE-SU-2026:4294-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
-
High max 8.7SUSE-SU-2026:4293-1 8 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…
-
High max 8.7SUSE-SU-2026:4292-1 8 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…
-
High max 8.7openSUSE-SU-2026:11850-1 1 CVE
perl-Mojolicious-9.490.0-2.1 on GA media
These are all security issues fixed in the perl-Mojolicious-9.490.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2026 -
High max 7.5openSUSE-SU-2026:11846-1 1 CVE
forgejo-longterm-15.0.8-1.1 on GA media
These are all security issues fixed in the forgejo-longterm-15.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:4288-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:4286-1 5 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278681) - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established c…
first Sep 22, 2026 -
High max 7.7SUSE-SU-2026:4283-1 6 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure (bsc#1271504). - CVE-2026-59944: path traversal and link following issue can make files world readable and…
first Sep 22, 2026 -
High max 8.2openSUSE-SU-2026:11849-1 3 CVEs
openai-codex-0.155.1-1.1 on GA media
These are all security issues fixed in the openai-codex-0.155.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2026 -
High max 7.8openSUSE-SU-2026:11845-1 1 CVE
flatpak-builder-1.4.12-1.1 on GA media
These are all security issues fixed in the flatpak-builder-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:4285-1 14 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Sep 22, 2026 -
High max 7.6SUSE-SU-2026:23848-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 21, 2026 -
High max 7.5openSUSE-SU-2026:11841-1 1 CVE
python313-uv-0.12.17-1.1 on GA media
These are all security issues fixed in the python313-uv-0.12.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 21, 2026