12,572 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:12416-1 7 CVEs
ffmpeg-8-8.1.3-4.1 on GA media
These are all security issues fixed in the ffmpeg-8-8.1.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Nov 4, 2026 -
High max 7.1SUSE-SU-2026:5102-1 1 CVE
Security update for valkey
This update for valkey fixes the following issues: - Refresh patch for CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Val…
first Nov 4, 2026 -
High max 8.1SUSE-SU-2026:5100-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
first Nov 4, 2026 -
High max 8.8SUSE-SU-2026:5098-1 3 CVEs
Security update for xdg-desktop-portal
This update for xdg-desktop-portal fixes the following issues: - CVE-2026-40354: file deletion via symlink attack (bsc#1262045). - CVE-2026-55888: arbitrary file access due to `SaveFiles` `files` option path traversal (bsc#1287724). - CVE-2026-55889: drag-and…
first Nov 4, 2026 -
High max 8.1SUSE-SU-2026:3509-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security i…
-
High max 7.8SUSE-SU-2026:5097-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 (bsc#1286763). - Fix build against renamed -nvidia64kb flavor (bsc#1282794). - Fix build against Linux 7.3.0 (RC) (bsc#1278022). - Re-disabled CX…
-
High max 7.8SUSE-SU-2026:5096-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 (bsc#1286763). - Fix build against renamed -nvidia64kb flavor (bsc#1282794). - Fix build against Linux 7.3.0 (RC) (bsc#1278022). - Re-disabled CX…
-
High max 7.8SUSE-SU-2026:5094-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
-
High max 7.1SUSE-SU-2026:5092-1 1 CVE
Security update for valkey
This update for valkey fixes the following issues: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Valkey cluster publis…
-
High max 7.5openSUSE-SU-2026:12402-1 2 CVEs
mdbook-0.5.4-1.1 on GA media
These are all security issues fixed in the mdbook-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.8SUSE-SU-2026:24513-1 79 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: - Update CUDA and non-CUDA variant to 580.196.07 (bsc#1286887). - Added CVEs for security release 580.178.04 (bsc#1270255): CVE-2026-47587, CVE-2026-47567, CVE-2026-47566, CVE-2026-4759…
first Nov 2, 2026 -
High max 8.7openSUSE-SU-2026:22221-1 2 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - Update google.golang.org/grpc to which fixes: * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22220-1 4 CVEs
Security update for libosmocore
This update for libosmocore fixes the following issues: Changes in libosmocore: - Update to release 1.14.2 * Fix buffer overflows/overreads in `bssgp_rx_paging`, `parse_process_uss_req`, `osmo_dec_gcr`, `osmo_pbit2ubit`, in the CBSP WRITE-REPLACE decoder, and…
first Nov 2, 2026 -
High max 7.1openSUSE-SU-2026:22219-1 7 CVEs
Security update for python-pypdf
This update for python-pypdf fixes the following issues: Changes in python-pypdf: - CVE-2026-119209: negative /Index values and multiplied xref streams can lead to clamp bypass and server memory exhaustion (bsc#1288950) - CVE-2026-119208: trusting forged /Cou…
first Nov 2, 2026 -
High max 7.5openSUSE-SU-2026:12409-1 1 CVE
rustup-1.29.2~0-1.1 on GA media
These are all security issues fixed in the rustup-1.29.2~0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 8.6openSUSE-SU-2026:12407-1 4 CVEs
python313-mistune-3.4.0-2.1 on GA media
These are all security issues fixed in the python313-mistune-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12396-1 4 CVEs
expat-2.10.0-1.1 on GA media
These are all security issues fixed in the expat-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12412-1 1 CVE
tftp-5.4-1.1 on GA media
These are all security issues fixed in the tftp-5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.1openSUSE-SU-2026:12400-1 1 CVE
libnfs-devel-6.0.2-2.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.4openSUSE-SU-2026:12398-1 3 CVEs
hostapd-2.12-1.1 on GA media
These are all security issues fixed in the hostapd-2.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.0openSUSE-SU-2026:12397-1 2 CVEs
heimdall-2.2.2-1.1 on GA media
These are all security issues fixed in the heimdall-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.7SUSE-SU-2026:24478-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended…
first Oct 30, 2026 -
High max 7.5SUSE-SU-2026:24472-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Oct 26, 2026 -
High max 8.6SUSE-SU-2026:24470-1 14 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an int…
first Oct 29, 2026 -
High max 8.2SUSE-SU-2026:24469-1 9 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).…
first Oct 27, 2026 -
High max 7.8SUSE-SU-2026:24468-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
first Oct 27, 2026 -
High max 7.5SUSE-SU-2026:24467-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: panic in `BorrowedCertRevocationList::from_der` via empty `BIT STRING` in `IssuingDistributionPoint` (bsc#1282250). - CVE-2026-93600: rustls-webpki: name const…
first Oct 27, 2026 -
High max 7.0SUSE-SU-2026:24466-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
first Oct 27, 2026 -
High max 8.8SUSE-SU-2026:24464-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the con…
first Oct 26, 2026 -
High max 7.8SUSE-SU-2026:24462-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 26, 2026 -
High max 8.7openSUSE-SU-2026:22228-1 1 CVE
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to address: * bsc#1288460, CVE-2026-116591, github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22226-1 10 CVEs
Security update for perl-MIME-tools
This update for perl-MIME-tools fixes the following issues: Changes in perl-MIME-tools: - updated to 5.522.0 (5.522) * 5.522 * VERSION 5.522 RELEASED * Many security issues were addressed (see the following ten CVEs) Issues were brought to my attention, and p…
first Nov 3, 2026 -
High max 8.1SUSE-SU-2026:5089-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
first Nov 3, 2026 -
High max 8.7openSUSE-SU-2026:22227-1 3 CVEs
Security update for go-containerregistry
This update for go-containerregistry fixes the following issues: Changes in go-containerregistry: - update vendor.tar to address: * bsc#1288488, CVE-2026-116591: github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the s…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22222-1 1 CVE
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.103.3: * fix(gh auth status): only diagnose token expiry after HTTP 401 * fix(gh auth status): explain expired expiring tokens with --no-refresh - Update to version 2.103.2: *…
first Nov 3, 2026 -
High max 7.0SUSE-SU-2026:5080-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
-
High max 7.5SUSE-SU-2026:5067-1 3 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253611). - CVE-2025-47914:…
-
High max 7.5SUSE-SU-2026:5066-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: Denial of service via panic on malformed CRL BIT STRING (bsc#1282250). - CVE-2026-93600: rustls-webpki: URI name constraint bypass in X.509 certificates (bsc#1…
-
High max 7.0SUSE-SU-2026:5065-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
-
High max 8.2SUSE-SU-2026:5061-1 1 CVE
Security update for guava, j2objc-annotations
This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc…