12,597 results · Clear filters · Feed
-
High max 8.7SUSE-SU-2026:3569-1 9 CVEs
Security update for python312
This update for python312 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 11, 2026 -
High max 8.8SUSE-SU-2026:3562-1 20 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-27951: 32-bit system denial of service via endless blocking loop in `Stream_EnsureCapacity` (bsc#1258939). - CVE-2026-33952: client denial of service via unvalidated authentication length field (b…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3557-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:3555-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issue: Security fixes: - CVE-2024-4367,CVE-2026-39872,CVE-2026-43663,CVE-2026-43676,CVE-2026-43699,CVE-2026-43701, CVE-2026-43705,CVE-2026-43707,CVE-2026-43712,CVE-2026-43713,CVE-2026-43715,CVE-2026-43716, CVE-2…
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:3552-1 2 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-66039: MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File (bsc#1272765).
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3551-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtra…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:3560-1 9 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 10, 2026 -
High max 8.1SUSE-SU-2026:3556-1 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issue - CVE-2026-41316: erb: @_init deserialization guard bypass via def_module / def_method / def_class (bsc#1262441).
first Aug 10, 2026 -
High max 8.6SUSE-SU-2026:3554-1 6 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: potential memory usage beyond configured limi…
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23064-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 11, 2026 -
High max 8.3SUSE-SU-2026:23063-1 12 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Changes for libpng16: - version update to 1.6.58 (jsc#PED-16190).
first Aug 11, 2026 -
High max 7.5SUSE-SU-2026:23050-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23049-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:11485-1 8 CVEs
java-11-openj9-11.0.32.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 8.8openSUSE-SU-2026:11490-1 6 CVEs
libpcp-devel-6.3.8-3.1 on GA media
These are all security issues fixed in the libpcp-devel-6.3.8-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:3541-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:3539-1 1 CVE
Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: memory leak in `ujson.dump()` on write failure can lead to DoS (bsc#1270301).
first Aug 10, 2026 -
High max 8.8openSUSE-SU-2026:11491-1 4 CVEs
python313-Django5-5.2.17-1.1 on GA media
These are all security issues fixed in the python313-Django5-5.2.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:11487-1 7 CVEs
java-1_8_0-openj9-1.8.0.502-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:3548-1 9 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:3542-1 7 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490). - CVE-2026-12706: heap use-after-free read in the …
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3537-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtra…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3536-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 7, 2026 -
High max 8.6openSUSE-SU-2026:11480-1 1 CVE
vlang-0.5.2-2.1 on GA media
These are all security issues fixed in the vlang-0.5.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 8.8openSUSE-SU-2026:11483-1 1 CVE
zpaqfranz-64.8-1.1 on GA media
These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.4openSUSE-SU-2026:11481-1 2 CVEs
weechat-4.10.0-1.1 on GA media
These are all security issues fixed in the weechat-4.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.5openSUSE-SU-2026:11479-1 1 CVE
libsdb2_5_0-6.2.0-1.1 on GA media
These are all security issues fixed in the libsdb2_5_0-6.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.8openSUSE-SU-2026:11474-1 2 CVEs
gitoxide-0.56.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.56.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 8.8openSUSE-SU-2026:11473-1 4 CVEs
dhcpcd-10.5.0-1.1 on GA media
These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.5openSUSE-SU-2026:11472-1 1 CVE
agama-web-ui-23+75.1a877fb50-50.1 on GA media
These are all security issues fixed in the agama-web-ui-23+75.1a877fb50-50.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.5SUSE-SU-2026:22997-1 1 CVE
Security update for hawk-apiserver
This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 (bsc#1267454) Version 0.1.0+git.1773234993.db3c82f: * handle /cib/live/primitives/<resource_id>/edit in ha…
first Jul 28, 2026 -
High max 8.7SUSE-SU-2026:3530-1 9 CVEs
Security update for python310
This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3529-1 7 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490). - CVE-2026-12706: heap use-after-free read in the …
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3526-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3525-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 7, 2026 -
High max 8.8openSUSE-SU-2026:21543-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups (bsc#1272997) - CVE-2026-15337: potential denial-of-service vulnerability in `check_for_langua…
first Aug 6, 2026 -
High max 7.5openSUSE-SU-2026:11470-1 1 CVE
python313-pyOpenSSL-26.4.0-1.1 on GA media
These are all security issues fixed in the python313-pyOpenSSL-26.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:3520-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 6, 2026 -
High max 8.1SUSE-SU-2026:3518-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).
first Aug 6, 2026 -
High max 7.2openSUSE-SU-2026:11467-1 10 CVEs
python313-aiohttp-3.14.3-1.1 on GA media
These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026