12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:3935-1 2 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop (bsc#1273145). - CVE-2026-64612: authentica…
first Sep 3, 2026 -
High max 7.2SUSE-SU-2026:3917-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 1, 2026 -
High max 8.7SUSE-SU-2026:3910-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (bsc#1275459). - CVE-2026-59893: Inefficient Regex Handling of Dollar-Quo…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:3887-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3885-1 18 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-40691: DoS due to heap overflow via single bad DNSCrypt query over TCP (bsc#1271875). - CVE-2026-42955: Ghost domain window can be extended by up t…
first Aug 31, 2026 -
High max 7.5openSUSE-SU-2026:11735-1 1 CVE
perl-Protocol-HTTP2-1.140.0-1.1 on GA media
These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5openSUSE-SU-2026:11733-1 5 CVEs
expat-2.8.4-1.1 on GA media
These are all security issues fixed in the expat-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.7openSUSE-SU-2026:11731-1 6 CVEs
containerized-data-importer1.65-api-1.65.0-3.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5openSUSE-SU-2026:11730-1 5 CVEs
cargo-audit-0.22.2~git0.281452c-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.22.2~git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:3953-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3949-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.7.2. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3948-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.6.7. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3946-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.4.17. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3945-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 3.2.20. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3943-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3942-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3934-1 6 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2026-64833: out-of-bounds read in the S/PDIF muxer via a crafted DTS stream with a `core_size` value larger than the actual packet length (bsc#1272755). - CVE-2026-64834: infinite loop in the RTP/ASF de…
first Sep 3, 2026 -
High max 7.7SUSE-SU-2026:3929-1 35 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - CVE-2025-22150: undici: predictable random values used when defining the boundary for a `multipart`/`form-data` request (bsc#1236258). - CVE-2026-6733: undici: response queue poisoning on reused keep-aliv…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3918-1 2 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop (bsc#1273145). - CVE-2026-64612: authentica…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:3916-1 3 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:3915-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:3901-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3898-1 1 CVE
Security update for python-httplib2
This update for python-httplib2 fixes the following issue: - CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with `Content-Encoding: gzip` or `deflate` can lead to OOM-kill in the client process when it connects to a compromised HTTP s…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3886-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 8.7SUSE-SU-2026:3906-1 4 CVEs
Security update for python3-sqlparse
This update for python3-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893…
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:23400-1 4 CVEs
Security update for dhcpcd
This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service (bsc#1268980). - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte sta…
first Aug 30, 2026 -
High max 7.5openSUSE-SU-2026:21814-1 3 CVEs
Security update for zk
This update for zk fixes the following issues: Changes in zk: - Update Go vendored dependencies to resolve security issues (boo#1278625, boo#1278447): * Upgrade golang.org/x/crypto to v0.56.0 to fix security vulnerabilities in the embedded x/crypto/ssh packag…
first Sep 8, 2026 -
High max 8.8openSUSE-SU-2026:11736-1 1 CVE
python313-modelscope-1.40.0-1.1 on GA media
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.7openSUSE-SU-2026:11732-1 5 CVEs
containerized-data-importer1.66-api-1.66.1-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.8SUSE-SU-2026:3941-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3940-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 7.8SUSE-SU-2026:3939-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages (bsc#1275863) - CVE-2026-63622: util: virFileChownFiles: do not follow symlinks (bsc#1275264) - CVE-2026-63623: storage: …
first Sep 3, 2026 -
High max 8.2SUSE-SU-2026:3936-1 4 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). Changes for libsoup2: - tld-test: update after changes in the public suffix list: '*.bd' is no longe…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3932-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue: - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3931-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 3, 2026 -
High max 7.7SUSE-SU-2026:3930-1 35 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - CVE-2025-22150: undici: predictable random values used when defining the boundary for a `multipart`/`form-data` request (bsc#1236258). - CVE-2026-6733: undici: response queue poisoning on reused keep-aliv…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3914-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Sep 1, 2026 -
High max 8.7SUSE-SU-2026:3907-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893:…
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:3895-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 8.8SUSE-SU-2026:3894-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.4.6. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026