12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:3893-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 3.3.22. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3890-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3889-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3888-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3884-1 17 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-40691: DoS due to heap overflow via single bad DNSCrypt query over TCP (bsc#1271875). - CVE-2026-42955: Ghost domain window can be extended by up t…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3882-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-41178: `go.opentelemetry.io/otel/baggage`,`go.opentelemetry.io/otel/propagation`: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). - CVE-2026-6…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3878-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). Changes for openssl-1_1: - Augu…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3877-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). Changes for openssl-1_1: - Augu…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3872-1 2 CVEs
Security update for libcares2
This update for libcares2 fixes the following issues: - CVE-2026-33630: Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP (bsc#1270416). - CVE-2026-69184: CPU-exhaustion denial of service vi…
first Aug 28, 2026 -
High max 7.0SUSE-SU-2026:3869-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065). Changes for 7zip: - Updated to 26.02.
first Aug 28, 2026 -
High max 7.8SUSE-SU-2026:23405-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the `as-user` option in the `org.freedesktop.UDisks2.Filesystem.Mount()` D-Bus method can lead to local privilege escalation (bsc#1274430).
first Aug 30, 2026 -
High max 8.7SUSE-SU-2026:23404-1 3 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS#7 `EnvelopedData` decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (bsc#1273551). - CVE-2026-69248: verifier accepts wildcard DNS names …
first Aug 30, 2026 -
High max 8.6SUSE-SU-2026:23393-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
High max 8.6SUSE-SU-2026:23391-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
High max 8.6SUSE-SU-2026:23365-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash …
first Aug 28, 2026 -
High max 8.3SUSE-SU-2026:23364-1 5 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: Update to c-ares 1.34.8. - CVE-2025-31498: use-after-free in `read_answers()` when `process_answer()` may re-enqueue a query (bsc#1240955). - CVE-2025-62408: use-after-free due to connection being cleaned up …
first Aug 28, 2026 -
High max 7.5SUSE-SU-2026:23360-1 23 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 26, 2026 -
High max 7.5SUSE-SU-2026:23349-1 23 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 26, 2026 -
High max 8.7SUSE-SU-2026:23327-1 7 CVEs
Security update for snphost
This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…
first Aug 24, 2026 -
High max 7.5SUSE-SU-2026:23326-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only UR…
first Aug 27, 2026 -
High max 7.5SUSE-SU-2026:23321-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 3.1 (bsc#1274715). Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398). - CVE-2026-26962: rack:…
first Aug 25, 2026 -
High max 8.7SUSE-SU-2026:23320-1 4 CVEs
Security update for libheif
This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…
first Aug 25, 2026 -
High max 7.0SUSE-SU-2026:23317-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: Update to 26.02. - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065).
first Aug 25, 2026 -
High max 8.8SUSE-SU-2026:23316-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 24, 2026 -
High max 7.5SUSE-SU-2026:23314-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 24, 2026 -
High max 8.2SUSE-SU-2026:23311-1 1 CVE
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
first Aug 24, 2026 -
High max 8.7SUSE-SU-2026:23303-1 8 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
High max 7.5openSUSE-SU-2026:21816-1 4 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 (bsc#1265425, CVE-2026-41888, bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, ).
first Sep 9, 2026 -
High max 7.7openSUSE-SU-2026:21778-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).
first Sep 6, 2026 -
High max 7.1openSUSE-SU-2026:21776-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
High max 7.5openSUSE-SU-2026:21749-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 3, 2026 -
High max 7.8openSUSE-SU-2026:21738-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…
first Sep 2, 2026 -
High max 7.1openSUSE-SU-2026:21737-1 11 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in `unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428). - CVE-2026-59184: out-…
first Sep 2, 2026 -
High max 7.2openSUSE-SU-2026:21736-1 10 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 2, 2026 -
High max 8.8openSUSE-SU-2026:21735-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: malicious or MiTM VNC servers can force a connecting `libvncclient` to write attacker-controlled data past the end of a framebuffer, which can lead to a crash or arbitrary code executio…
first Sep 2, 2026 -
High max 7.2openSUSE-SU-2026:21782-1 3 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…
first Sep 7, 2026 -
High max 7.2openSUSE-SU-2026:11723-1 3 CVEs
python313-comfyui-frontend-package-1.52.7-1.1 on GA media
These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
High max 7.5openSUSE-SU-2026:11717-1 1 CVE
git-bug-0.10.1-7.1 on GA media
These are all security issues fixed in the git-bug-0.10.1-7.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
High max 7.5openSUSE-SU-2026:11727-1 11 CVEs
rclone-1.75.1-1.1 on GA media
These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
High max 7.5openSUSE-SU-2026:11720-1 1 CVE
ggml-devel-0.4.0-1.1 on GA media
These are all security issues fixed in the ggml-devel-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026