12,597 results · Clear filters · Feed
-
High max 7.0openSUSE-SU-2026:21641-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: Update to 26.02. - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065).
first Aug 25, 2026 -
High max 7.5openSUSE-SU-2026:21640-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 3.1 (bsc#1274715). Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398). - CVE-2026-26962: rack:…
first Aug 25, 2026 -
High max 7.5openSUSE-SU-2026:21639-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 24, 2026 -
High max 8.7openSUSE-SU-2026:21638-1 7 CVEs
Security update for snphost
This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…
first Aug 24, 2026 -
High max 8.8openSUSE-SU-2026:21636-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 24, 2026 -
High max 8.2openSUSE-SU-2026:21633-1 1 CVE
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
first Aug 24, 2026 -
High max 7.0SUSE-SU-2026:23250-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
High max 7.5SUSE-SU-2026:23249-1 5 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-32728: fix logic error in DisableForwarding option (bsc#1241012). - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a fil…
first Aug 21, 2026 -
High max 8.7SUSE-SU-2026:23247-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549). - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-buildi…
first Aug 19, 2026 -
High max 7.5SUSE-SU-2026:23246-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.611.g7d90691. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 19, 2026 -
High max 8.8SUSE-SU-2026:23245-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_pass…
first Aug 19, 2026 -
High max 8.7SUSE-SU-2026:23236-1 7 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwra…
first Aug 13, 2026 -
High max 8.5SUSE-SU-2026:23235-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
High max 8.8SUSE-SU-2026:23232-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:23229-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:23228-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23226-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23225-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 8.5SUSE-SU-2026:23223-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
High max 8.8SUSE-SU-2026:23222-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:23218-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:23217-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23215-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23214-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:11614-1 1 CVE
python313-Authlib-1.7.2-3.1 on GA media
These are all security issues fixed in the python313-Authlib-1.7.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 7.1openSUSE-SU-2026:11612-1 16 CVEs
libIex-3_4-33-3.4.14-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 8.8openSUSE-SU-2026:11600-1 14 CVEs
389-ds-3.2.2+4b41542b2-1.1 on GA media
These are all security issues fixed in the 389-ds-3.2.2+4b41542b2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 8.6SUSE-SU-2026:3801-1 1 CVE
Security update for git-lfs
This update for git-lfs fixes the following issue: - CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist (bsc#1252259). Changes for git-lfs: -…
first Aug 25, 2026 -
High max 8.8SUSE-SU-2026:3793-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 25, 2026 -
High max 8.8SUSE-SU-2026:3794-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 25, 2026 -
High max 8.7SUSE-SU-2026:3791-1 7 CVEs
Security update for snpguest
This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270541). - CVE-2026-41678: openssl: incorre…
first Aug 25, 2026 -
High max 8.8openSUSE-SU-2026:11601-1 1 CVE
LibVNCServer-devel-0.9.15-4.1 on GA media
These are all security issues fixed in the LibVNCServer-devel-0.9.15-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 8.9openSUSE-SU-2026:11590-1 3 CVEs
tor-0.4.9.11-1.1 on GA media
These are all security issues fixed in the tor-0.4.9.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 7.5openSUSE-SU-2026:11589-1 2 CVEs
python313-yarl-1.24.5-1.1 on GA media
These are all security issues fixed in the python313-yarl-1.24.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 8.8openSUSE-SU-2026:11587-1 2 CVEs
python313-nltk-3.10.3-1.1 on GA media
These are all security issues fixed in the python313-nltk-3.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 7.5openSUSE-SU-2026:11586-1 1 CVE
python313-msgpack-1.2.1-1.1 on GA media
These are all security issues fixed in the python313-msgpack-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 8.4
clamav-1.5.4-1.1 on GA media
These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 7.5openSUSE-SU-2026:11582-1 1 CVE
apache2-mod_auth_openidc-2.4.20.2-1.1 on GA media
These are all security issues fixed in the apache2-mod_auth_openidc-2.4.20.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 24, 2026 -
High max 8.7SUSE-SU-2026:3762-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (bsc#1275459). - CVE-2026-59893: Inefficient Regex Handling of Dollar-Quo…
first Aug 24, 2026 -
High max 7.6SUSE-SU-2026:3687-1 3 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…
first Aug 21, 2026