12,597 results · Clear filters · Feed
-
High max 8.8openSUSE-SU-2026:21508-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Aug 1, 2026 -
High max 7.8openSUSE-SU-2026:11430-1 1 CVE
librrd8-1.10.3-1.1 on GA media
These are all security issues fixed in the librrd8-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.7openSUSE-SU-2026:11429-1 4 CVEs
python315-3.15.0~b4-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~b4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.7openSUSE-SU-2026:11428-1 9 CVEs
python312-3.12.13-8.1 on GA media
These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.7openSUSE-SU-2026:11427-1 9 CVEs
python311-3.11.15-8.1 on GA media
These are all security issues fixed in the python311-3.11.15-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.7openSUSE-SU-2026:11426-1 6 CVEs
python310-3.10.20-8.1 on GA media
These are all security issues fixed in the python310-3.10.20-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.1openSUSE-SU-2026:11418-1 3 CVEs
php8-8.5.9-1.1 on GA media
These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 7.5openSUSE-SU-2026:11421-1 2 CVEs
python313-certifi-2026.7.22-1.1 on GA media
These are all security issues fixed in the python313-certifi-2026.7.22-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.7openSUSE-SU-2026:11416-1 4 CVEs
gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.1openSUSE-SU-2026:11414-1 2 CVEs
GraphicsMagick-1.3.48-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.48-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.8openSUSE-SU-2026:11431-1 4 CVEs
ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media
These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
High max 8.3openSUSE-SU-2026:11413-1 3 CVEs
perses-cli-0.54.0-1.1 on GA media
These are all security issues fixed in the perses-cli-0.54.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 31, 2026 -
High max 8.6openSUSE-SU-2026:21489-1 9 CVEs
Security update for bind
This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exit (bsc#1271983). - CVE-2026-1…
first Jul 30, 2026 -
High max 8.7openSUSE-SU-2026:21502-1 4 CVEs
Security update for nsd
This update for nsd fixes the following issues: Changes in nsd: - Update nsd.keyring - update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog * CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc…
first Jul 29, 2026 -
High max 8.8openSUSE-SU-2026:21485-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: Update to version 8.0.10. - CVE-2026-56684: RCE via CLIENT KILL due to use-after-free in TLS connection handling (bsc#1272443). - CVE-2026-63639: RCE via corrupt stream RDB files due to use-after-free when lo…
first Jul 30, 2026 -
High max 8.1openSUSE-SU-2026:21484-1 9 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image (bsc#1271102). - CVE-2026-42617: heap buffer overfl…
first Jul 30, 2026 -
High max 7.7openSUSE-SU-2026:21477-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an attacker-controlled server (bsc#1271044). - CVE-2026-59996: scp: file placed in the pa…
first Jul 29, 2026 -
High max 8.8openSUSE-SU-2026:21475-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths witho…
first Jul 29, 2026 -
High max 8.4SUSE-SU-2026:3433-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Jul 30, 2026 -
High max 7.5SUSE-SU-2026:3431-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed (bsc#1272214).
first Jul 30, 2026 -
High max 8.4SUSE-SU-2026:3428-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:3427-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (bsc#1272443). - CVE-2026-63639: corrupt stream RDB file…
first Jul 30, 2026 -
High max 8.6SUSE-SU-2026:3426-1 9 CVEs
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.26. Security issues fixed: - CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit (bsc…
first Jul 30, 2026 -
High max 8.1SUSE-SU-2026:3425-1 1 CVE
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by `Screen.start()` are not cryptographically secure (bsc#1271868).
first Jul 30, 2026 -
High max 8.7openSUSE-SU-2026:21464-1 8 CVEs
Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429). - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:de…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21457-1 1 CVE
Security update for hawk-apiserver
This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 (bsc#1267454) Version 0.1.0+git.1773234993.db3c82f: * handle /cib/live/primitives/<resource_id>/edit in ha…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21455-1 1 CVE
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3406-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - …
first Jul 29, 2026 -
High max 7.3SUSE-SU-2026:3399-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues - CVE-2026-58379: Heap buffer overflow in read_channel_data() (bsc#1270299). - CVE-2026-58380: Stack buffer overflow in pnmscanner_gettoken() (bsc#1270444). - CVE-2026-58381: double-free in read_layer_block() (b…
first Jul 29, 2026 -
High max 7.5openSUSE-SU-2026:21470-1 9 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unau…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3409-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Jul 29, 2026 -
High max 8.8SUSE-SU-2026:3423-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
-
High max 7.9SUSE-SU-2026:3422-1 1 CVE
Security update for python-sh
This update for python-sh fixes the following issues: - CVE-2026-54552: incomplete privilege drop in the _uid option can allow a subprocess to retain parent supplementary groups (bsc#1272424).
-
High max 7.5SUSE-SU-2026:3397-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3396-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21467-1 9 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unau…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3393-1 2 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 7.8SUSE-SU-2026:3392-1 1 CVE
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
first Jul 28, 2026 -
High max 8.2openSUSE-SU-2026:11409-1 1 CVE
libxmlrpc++9-1.64.03-2.1 on GA media
These are all security issues fixed in the libxmlrpc++9-1.64.03-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
High max 7.0openSUSE-SU-2026:11408-1 4 CVEs
libblkid-devel-2.42.2-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.42.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026