12,597 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:11550-1 1 CVE
perl-Net-CIDR-Set-0.230.0-1.1 on GA media
These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.4openSUSE-SU-2026:11547-1 4 CVEs
gimp-3.2.4-4.1 on GA media
These are all security issues fixed in the gimp-3.2.4-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.1openSUSE-SU-2026:11544-1 1 CVE
apptainer-1.5.3-2.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.5SUSE-SU-2026:3662-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 20, 2026 -
High max 7.5SUSE-SU-2026:3652-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11555-1 25 CVEs
postgresql17-17.11-1.1 on GA media
These are all security issues fixed in the postgresql17-17.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11554-1 25 CVEs
postgresql16-16.15-1.1 on GA media
These are all security issues fixed in the postgresql16-16.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11553-1 24 CVEs
postgresql15-15.19-1.1 on GA media
These are all security issues fixed in the postgresql15-15.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.1openSUSE-SU-2026:21606-1 1 CVE
Security update for python-unearth
This update for python-unearth fixes the following issues: Changes in python-unearth: - CVE-2026-73030: `is_within_directory` function fails to normalize paths before validation and allows `../` sequences to bypass directory containment checks (bsc#1275440)
first Aug 18, 2026 -
High max 7.5openSUSE-SU-2026:21602-1 2 CVEs
Security update for python-pytest-html
This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor browserslist to fix the following: * CVE-2026-73088: unguarded for...in loop over untrusted JSON keys in normalizeStats() function leads to prototype poll…
first Aug 18, 2026 -
High max 8.7openSUSE-SU-2026:21595-1 8 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
High max 8.7openSUSE-SU-2026:11557-1 4 CVEs
python313-sqlparse-0.6.0-1.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.5openSUSE-SU-2026:11556-1 2 CVEs
python313-hpack-4.2.0-1.1 on GA media
These are all security issues fixed in the python313-hpack-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.7SUSE-SU-2026:3649-1 13 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
High max 8.5SUSE-SU-2026:3647-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: - CVE-2026-44943: remote file-write as root via discovery (bsc#1268353). - CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352). Changes for open-iscsi: - Update to version 2.1.12.suse+0.8f77…
first Aug 19, 2026 -
High max 8.1openSUSE-SU-2026:11541-1 2 CVEs
python313-unearth-0.18.3-1.1 on GA media
These are all security issues fixed in the python313-unearth-0.18.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 7.5openSUSE-SU-2026:11540-1 1 CVE
python313-pytest-html-4.2.0-5.1 on GA media
These are all security issues fixed in the python313-pytest-html-4.2.0-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 7.2openSUSE-SU-2026:11539-1 1 CVE
postorius-1.3.13-8.1 on GA media
These are all security issues fixed in the postorius-1.3.13-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 7.5openSUSE-SU-2026:11538-1 3 CVEs
python313-datamodel-code-generator-0.72.3-1.1 on GA media
These are all security issues fixed in the python313-datamodel-code-generator-0.72.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 7.1openSUSE-SU-2026:11537-1 1 CVE
libjxl-devel-0.12.0-1.1 on GA media
These are all security issues fixed in the libjxl-devel-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 7.5openSUSE-SU-2026:11535-1 1 CVE
bun-1.4.0~git20260808.52bf09cb-2.1 on GA media
These are all security issues fixed in the bun-1.4.0~git20260808.52bf09cb-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
High max 8.7SUSE-SU-2026:3642-1 7 CVEs
Security update for snphost
This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…
first Aug 18, 2026 -
High max 8.4openSUSE-SU-2026:21585-1 1 CVE
Security update for htop
This update for htop fixes the following issues: Changes in htop: - Update to version 3.5.3: * Improve the htoprc settings parser to avoid segfaults on tampered configuration files (sanitised sort keys, validated configuration invariants, NULL safety for head…
first Aug 17, 2026 -
High max 8.5SUSE-SU-2026:23157-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
High max 7.5SUSE-SU-2026:3639-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).
-
High max 7.5SUSE-SU-2026:3638-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).
-
High max 7.5SUSE-SU-2026:3637-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).
-
High max 7.5SUSE-SU-2026:3636-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).
-
High max 8.7SUSE-SU-2026:3635-1 10 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the …
-
High max 8.7openSUSE-SU-2026:11534-1 6 CVEs
python313-3.13.14-2.1 on GA media
These are all security issues fixed in the python313-3.13.14-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 17, 2026 -
High max 7.5openSUSE-SU-2026:11532-1 1 CVE
mihomo-1.19.30-1.1 on GA media
These are all security issues fixed in the mihomo-1.19.30-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 17, 2026 -
High max 8.4openSUSE-SU-2026:11531-1 1 CVE
htop-3.5.3-1.1 on GA media
These are all security issues fixed in the htop-3.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 17, 2026 -
High max 8.8SUSE-SU-2026:3632-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issue: - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490).
first Aug 17, 2026 -
High max 8.7SUSE-SU-2026:3631-1 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution (bsc#1272393).
first Aug 17, 2026 -
High max 7.0SUSE-SU-2026:3629-1 2 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511). - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).
first Aug 17, 2026 -
High max 7.5SUSE-SU-2026:3623-1 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Security issues fixed: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459). - CVE-2026-46968: unauthorized creation, deletion or mod…
first Aug 14, 2026 -
High max 7.5SUSE-SU-2026:3622-1 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459). - CVE-2026-46968: unauthorized creation, deletion or modification access to cri…
first Aug 14, 2026 -
High max 8.5openSUSE-SU-2026:21580-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
High max 8.7openSUSE-SU-2026:21579-1 7 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwra…
first Aug 13, 2026 -
High max 8.8openSUSE-SU-2026:11515-1 6 CVEs
ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026