12,597 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:11527-1 5 CVEs
sccache-0.17.0~1-2.1 on GA media
These are all security issues fixed in the sccache-0.17.0~1-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
High max 7.5openSUSE-SU-2026:11524-1 3 CVEs
python313-pysaml2-7.5.4-1.1 on GA media
These are all security issues fixed in the python313-pysaml2-7.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
High max 8.8openSUSE-SU-2026:11521-1 1 CVE
libgit2-1_9-1.9.7-1.1 on GA media
These are all security issues fixed in the libgit2-1_9-1.9.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
High max 8.8openSUSE-SU-2026:11511-1 5 CVEs
chromedriver-151.0.7922.137-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.137-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 14, 2026 -
High max 7.5SUSE-SU-2026:23142-1 1 CVE
Security update for python-httplib2
This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError o…
first Aug 4, 2026 -
High max 7.8SUSE-SU-2026:23141-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 4, 2026 -
High max 8.1SUSE-SU-2026:23140-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).
first Aug 4, 2026 -
High max 8.8SUSE-SU-2026:23138-1 7 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …
first Aug 3, 2026 -
High max 8.7SUSE-SU-2026:23136-1 1 CVE
Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump() can lead to memory leaks (bsc#1270301).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:23131-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 8.1SUSE-SU-2026:23122-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…
first Aug 5, 2026 -
High max 7.5SUSE-SU-2026:23120-1 1 CVE
Security update for python-httplib2
This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError o…
first Aug 4, 2026 -
High max 7.8SUSE-SU-2026:23119-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 4, 2026 -
High max 8.1SUSE-SU-2026:23118-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).
first Aug 4, 2026 -
High max 8.8SUSE-SU-2026:23116-1 7 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …
first Aug 3, 2026 -
High max 7.9SUSE-SU-2026:23112-1 1 CVE
Security update for python-sh
This update for python-sh fixes the following issue - CVE-2026-54552: `_uid` option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation (bsc#1272424).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:23130-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23124-1 16 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…
first Aug 5, 2026 -
High max 7.5SUSE-SU-2026:23078-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte o…
first Aug 3, 2026 -
High max 8.8openSUSE-SU-2026:21572-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:23155-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23154-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23147-1 16 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:23145-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:23144-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…
first Aug 5, 2026 -
High max 7.9SUSE-SU-2026:23134-1 1 CVE
Security update for python-sh
This update for python-sh fixes the following issue - CVE-2026-54552: `_uid` option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation (bsc#1272424).
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:23133-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Aug 1, 2026 -
High max 8.1SUSE-SU-2026:23121-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…
first Aug 5, 2026 -
High max 8.7SUSE-SU-2026:23114-1 1 CVE
Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump() can lead to memory leaks (bsc#1270301).
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:23111-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Aug 1, 2026 -
High max 8.8
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23095-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23081-1 2 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23080-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
High max 8.7SUSE-SU-2026:23071-1 13 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-4167…
first Jul 30, 2026 -
High max 8.7SUSE-SU-2026:23070-1 8 CVEs
Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429). - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:de…
first Jul 30, 2026 -
High max 8.1SUSE-SU-2026:3615-1 14 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223). - CVE-2026-16243: inconsistent handling of zero length data in `arraycmp` of the SIMD evaluator (bsc#1274275). - CVE-2026-16439: using `…
first Aug 13, 2026 -
High max 8.1SUSE-SU-2026:3614-1 14 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223). - CVE-2026-16243: inconsistent handling of zero length data in `arraycmp` of the SIMD evaluator (bsc#1274275). - CVE-2026-16439: using `…
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3613-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 13, 2026