12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:4001-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#12…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3999-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763). …
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3997-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:3996-1 1 CVE
Security update for gegl
This update for gegl fixes the following issue: - CVE-2026-18300: integer overflow in HDR file parsing can allow undersized buffer allocations (bsc#1276229).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3995-1 6 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134). - CVE-2026-15167: Denial of S…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3994-1 10 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134). - CVE-2026-15166: Denial of S…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:3993-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - code execution upon opening arbitrary file (bsc#1275941). - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader (bsc#1276264). - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#127…
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:3992-1 3 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:3991-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:3990-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:3963-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3962-1 1 CVE
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issue: - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop (bsc#1271995).
first Sep 3, 2026 -
High max 7.1openSUSE-SU-2026:21832-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
High max 8.2openSUSE-SU-2026:11769-1 2 CVEs
zstd-jni-1.5.7.16-1.1 on GA media
These are all security issues fixed in the zstd-jni-1.5.7.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.5openSUSE-SU-2026:11768-1 1 CVE
syncthing-2.1.5-1.1 on GA media
These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.8
docker-29.7.2_ce-41.1 on GA media
These are all security issues fixed in the docker-29.7.2_ce-41.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 8.3openSUSE-SU-2026:11767-1 2 CVEs
bson-devel-2.5.3-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.8openSUSE-SU-2026:21828-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
High max 7.5openSUSE-SU-2026:21818-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
High max 8.2openSUSE-SU-2026:11757-1 2 CVEs
python312-3.12.14-1.1 on GA media
These are all security issues fixed in the python312-3.12.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11762-1 1 CVE
yast2-samba-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-samba-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 8.2openSUSE-SU-2026:11756-1 4 CVEs
python311-3.11.16-1.1 on GA media
These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11755-1 2 CVEs
python313-python-gnupg-0.5.6-2.1 on GA media
These are all security issues fixed in the python313-python-gnupg-0.5.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 8.8openSUSE-SU-2026:11752-1 5 CVEs
kubevirt1.9-container-disk-1.9.0-3.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11751-1 1 CVE
google-osconfig-agent-20260908.00-2.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11749-1 9 CVEs
strongswan-6.1.0-1.1 on GA media
These are all security issues fixed in the strongswan-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.2openSUSE-SU-2026:11748-1 7 CVEs
python315-3.15.0~rc2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~rc2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.2openSUSE-SU-2026:11747-1 3 CVEs
python310-3.10.21-1.1 on GA media
These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.8openSUSE-SU-2026:11746-1 1 CVE
python313-modelscope-hub-0.4.2-1.1 on GA media
These are all security issues fixed in the python313-modelscope-hub-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11744-1 7 CVEs
libpcap-devel-1.10.7-1.1 on GA media
These are all security issues fixed in the libpcap-devel-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11743-1 2 CVEs
google-osconfig-agent-20260908.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11742-1 1 CVE
google-guest-agent-20260903.01-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20260903.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 7.5openSUSE-SU-2026:11741-1 5 CVEs
cargo-c-0.10.25-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11740-1 2 CVEs
azure-storage-azcopy-10.32.8-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 7.5openSUSE-SU-2026:11729-1 1 CVE
ansible-creator-26.8.0-1.1 on GA media
These are all security issues fixed in the ansible-creator-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:3952-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 3, 2026 -
High max 8.8openSUSE-SU-2026:11738-1 3 CVEs
xen-4.22.0_04-1.1 on GA media
These are all security issues fixed in the xen-4.22.0_04-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.0SUSE-SU-2026:3947-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.5.8. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3944-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026