12,597 results · Clear filters · Feed
-
High max 8.4SUSE-SU-2026:3688-1 2 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-59088: GIMP: Denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (bsc#1274840).
first Aug 21, 2026 -
High max 7.6SUSE-SU-2026:3686-1 3 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…
first Aug 21, 2026 -
High max 7.0SUSE-SU-2026:3685-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
High max 7.0SUSE-SU-2026:3684-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
High max 8.6SUSE-SU-2026:3680-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…
first Aug 21, 2026 -
High max 8.6SUSE-SU-2026:3677-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…
first Aug 21, 2026 -
High max 7.5SUSE-SU-2026:23205-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#…
first Aug 17, 2026 -
High max 8.6SUSE-SU-2026:23190-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash …
first Aug 18, 2026 -
High max 8.6SUSE-SU-2026:23188-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Aug 17, 2026 -
High max 8.8SUSE-SU-2026:23187-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 17, 2026 -
High max 7.2openSUSE-SU-2026:11599-1 8 CVEs
ucode-intel-20260812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 25, 2026 -
High max 8.7openSUSE-SU-2026:11597-1 3 CVEs
python314-3.14.7-1.1 on GA media
These are all security issues fixed in the python314-3.14.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 25, 2026 -
High max 7.5openSUSE-SU-2026:11593-1 3 CVEs
c-ares-devel-1.34.8-1.1 on GA media
These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 25, 2026 -
High max 8.7SUSE-SU-2026:23196-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549). - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-buildi…
first Aug 19, 2026 -
High max 7.5SUSE-SU-2026:23195-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.645.g79fd74d. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11581-1 7 CVEs
chromedriver-151.0.7922.173-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.173-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 23, 2026 -
High max 7.4openSUSE-SU-2026:21615-1 2 CVEs
Security update for weechat
This update for weechat fixes the following issues: Changes in weechat: - Update to 4.10.0: Added * core: add command /theme (#1338) * core: add built-in "light" theme, applied automatically on first start on light-background terminals (#1338) * core: add the…
first Aug 20, 2026 -
High max 7.7openSUSE-SU-2026:21612-1 5 CVEs
Security update for redis
This update for redis fixes the following issues: Changes in redis: - Update to 8.10.1 Update urgency: SECURITY: There are security fixes in the release. - Security fixes - (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OO…
first Aug 20, 2026 -
High max 7.1openSUSE-SU-2026:21611-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. …
first Aug 20, 2026 -
High max 8.6openSUSE-SU-2026:21621-1 2 CVEs
Security update for git-lfs
This update for git-lfs fixes the following issues: Changes in git-lfs: - update to 3.7.1: (boo#1252259 CVE-2025-26625) This release introduces security fixes for Linux, macOS, and Windows systems, which have been collectively assigned CVE-2025-26625. When po…
first Aug 21, 2026 -
High max 8.1openSUSE-SU-2026:11579-1 28 CVEs
libwireshark19-4.6.8-2.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 22, 2026 -
High max 7.0openSUSE-SU-2026:11577-1 1 CVE
python313-eventlet-0.41.2-1.1 on GA media
These are all security issues fixed in the python313-eventlet-0.41.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 22, 2026 -
High max 8.4openSUSE-SU-2026:11575-1 3 CVEs
helm-4.2.4-1.1 on GA media
These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 22, 2026 -
High max 7.5openSUSE-SU-2026:11572-1 1 CVE
python313-graphifyy-0.9.48-1.1 on GA media
These are all security issues fixed in the python313-graphifyy-0.9.48-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 7.5openSUSE-SU-2026:11568-1 1 CVE
python313-Pygments-2.21.0-1.1 on GA media
These are all security issues fixed in the python313-Pygments-2.21.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 7.5openSUSE-SU-2026:11567-1 1 CVE
python313-Mako-1.4.1-1.1 on GA media
These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 8.8openSUSE-SU-2026:11566-1 9 CVEs
python313-GitPython-3.1.59-2.1 on GA media
These are all security issues fixed in the python313-GitPython-3.1.59-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 8.8openSUSE-SU-2026:11565-1 28 CVEs
libecpg6-18.6-1.1 on GA media
These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 8.8openSUSE-SU-2026:11563-1 8 CVEs
ffmpeg-4-4.4.8-4.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 8.2openSUSE-SU-2026:11562-1 1 CVE
comfyui-0.33.3-1.1 on GA media
These are all security issues fixed in the comfyui-0.33.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
High max 7.5SUSE-SU-2026:23176-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service (bsc#1268683).
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:23169-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:23167-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:23163-1 5 CVEs
Security update for wget
This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffe…
first Aug 4, 2026 -
High max 8.8SUSE-SU-2026:23174-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 11, 2026 -
High max 8.7SUSE-SU-2026:23159-1 8 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
High max 7.6SUSE-SU-2026:3678-1 4 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…
first Aug 21, 2026 -
High max 7.5SUSE-SU-2026:3674-1 5 CVEs
Security update for sccache
This update for sccache fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274146). - CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Va…
first Aug 21, 2026 -
High max 8.8openSUSE-SU-2026:11552-1 24 CVEs
postgresql14-14.24-1.1 on GA media
These are all security issues fixed in the postgresql14-14.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11545-1 9 CVEs
ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026