12,572 results · Clear filters · Feed
-
High max 8.1SUSE-SU-2026:5082-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
-
High max 7.5openSUSE-SU-2026:12388-1 4 CVEs
libosmocodec-devel-1.14.2-2.1 on GA media
These are all security issues fixed in the libosmocodec-devel-1.14.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
High max 8.1openSUSE-SU-2026:12391-1 6 CVEs
python313-GitPython-3.2.1-1.1 on GA media
These are all security issues fixed in the python313-GitPython-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
High max 7.0SUSE-SU-2026:4637-2 1 CVE
Security update for gcc48
This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Nov 2, 2026 -
High max 7.8SUSE-SU-2026:5039-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
first Nov 2, 2026 -
High max 7.3SUSE-SU-2026:5042-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-112307: arbitrary code execution via unescaped PHP output formatting (bsc#1286096).
first Nov 2, 2026 -
High max 8.7SUSE-SU-2026:4949-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832).
first Oct 30, 2026 -
High max 8.9SUSE-SU-2026:4948-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding …
first Oct 30, 2026 -
High max 8.2SUSE-SU-2026:24460-1 9 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).…
first Oct 27, 2026 -
High max 7.3openSUSE-SU-2026:12382-1 1 CVE
python313-sqlparse-0.6.0-2.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
High max 7.5openSUSE-SU-2026:12381-1 4 CVEs
python-Twisted-doc-26.10.0-1.1 on GA media
These are all security issues fixed in the python-Twisted-doc-26.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
High max 7.8openSUSE-SU-2026:12376-1 8 CVEs
busybox-1.38.0-4.1 on GA media
These are all security issues fixed in the busybox-1.38.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
High max 7.0SUSE-SU-2026:4637-1 1 CVE
Security update for gcc48
This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
-
High max 7.5openSUSE-SU-2026:22201-1 2 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor: * CVE-2026-114437: github.com/go-chi/chi/v5: client IP spoofing in `ClientIPFromXFF` via `X-Forwarded-For (bsc#1287881) - update to 2.1.2 (bsc#1285270, CVE-2026-78669): * I…
first Oct 28, 2026 -
High max 7.5openSUSE-SU-2026:22194-1 2 CVEs
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to 1.15.0: * Fixes VUL-0: CVE-2026-78669: excessive CPU consumption in HTTP/2 (boo#1285501) and CVE-2026-97032: HTTP/2 server crash due to HPACK encoder race (boo#1287577) by bum…
first Oct 27, 2026 -
High max 7.5openSUSE-SU-2026:22200-1 2 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285500) * CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due …
first Oct 28, 2026 -
High max 7.5openSUSE-SU-2026:22178-1 3 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-19585: github.com/hashicorp/go-getter: path traversal during S3 and GCS directory downloads may allow files to be written outside the requested destination (bsc#1284829). - CVE-2026-78669: golang.or…
first Oct 28, 2026 -
High max 7.8openSUSE-SU-2026:22192-1 3 CVEs
Security update for libmikmod
This update for libmikmod fixes the following issues: Changes in libmikmod: - CVE-2026-105839: make sure that numtrk calculation fits into an UWORD (bsc#1284366) - CVE-2026-105838: bump itpat allocation to 256, matching allowed packlen limit (bsc#1284367) - C…
first Oct 26, 2026 -
High max 7.5openSUSE-SU-2026:22189-1 6 CVEs
Security update for shadowsocks-rust, shadowsocks-libev
This update for shadowsocks-rust, shadowsocks-libev fixes the following issues: Changes in shadowsocks-rust: - Fix SELinux denial (name_connect) when forwarding outbound TCP traffic (boo#1284975) - Fix: Unable to bind ports below 1024 with SELinux enabled (bo…
first Oct 26, 2026 -
High max 8.2openSUSE-SU-2026:22177-1 9 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).…
first Oct 27, 2026 -
High max 7.8openSUSE-SU-2026:22176-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
first Oct 27, 2026 -
High max 7.5openSUSE-SU-2026:22175-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: panic in `BorrowedCertRevocationList::from_der` via empty `BIT STRING` in `IssuingDistributionPoint` (bsc#1282250). - CVE-2026-93600: rustls-webpki: name const…
first Oct 27, 2026 -
High max 7.0openSUSE-SU-2026:22174-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
first Oct 27, 2026 -
High max 8.8openSUSE-SU-2026:22172-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the con…
first Oct 26, 2026 -
High max 7.8openSUSE-SU-2026:22170-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 26, 2026 -
High max 7.0SUSE-SU-2026:24442-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issue: - CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338).
first Oct 23, 2026 -
High max 8.7openSUSE-SU-2026:12375-1 2 CVEs
warewulf4-4.7.1-2.1 on GA media
These are all security issues fixed in the warewulf4-4.7.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 31, 2026 -
High max 8.4openSUSE-SU-2026:22203-1 1 CVE
Security update for tailscale
This update for tailscale fixes the following issues: Changes in tailscale: Update to version 1.104.1: + Go is updated to version 1.27 + WireGuard packet buffering uses less memory while waiting for peer handshakes + WireGuard packet queue depth scales with C…
first Oct 29, 2026 -
High max 7.0openSUSE-SU-2026:22198-1 1 CVE
Security update for vlc
This update for vlc fixes the following issues: Changes in vlc: - Add conditional for pkgconfig(vpl) BuildRequires and plugin, exclude %{arm} ppc64le %{ppc} s390x. - Add conditional for pkgconfig(libnfs) BuildRequires and plugin, exclude %{arm} - Switch to qt…
first Oct 28, 2026 -
High max 7.5openSUSE-SU-2026:22197-1 1 CVE
Security update for gosec
This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.30.0 (bsc#1287590, CVE-2026-97032): * fix(g602): recognize equality comparison in minimumLenForBranch (#1796) * fix(G112): honor read timeouts assigned through a struct …
first Oct 28, 2026 -
High max 8.1openSUSE-SU-2026:22184-1 4 CVEs
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910). - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - CVE-2026-78002: Raine…
first Oct 29, 2026 -
High max 8.7openSUSE-SU-2026:22182-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832).
first Oct 29, 2026 -
High max 8.6openSUSE-SU-2026:22181-1 14 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an int…
first Oct 29, 2026 -
High max 7.5openSUSE-SU-2026:12347-1 10 CVEs
perl-MIME-tools-5.522.0-1.1 on GA media
These are all security issues fixed in the perl-MIME-tools-5.522.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026 -
High max 7.1openSUSE-SU-2026:12341-1 1 CVE
buildah-1.46.0-1.1 on GA media
These are all security issues fixed in the buildah-1.46.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026 -
High max 8.7openSUSE-SU-2026:12340-1 1 CVE
amazon-cloudwatch-agent-1.300073.2-3.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026 -
High max 7.8openSUSE-SU-2026:12373-1 4 CVEs
screen-5.0.2-1.1 on GA media
These are all security issues fixed in the screen-5.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2026 -
High max 7.8openSUSE-SU-2026:12372-1 9 CVEs
python313-virtualenv-21.15.1-1.1 on GA media
These are all security issues fixed in the python313-virtualenv-21.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2026 -
High max 7.5openSUSE-SU-2026:12352-1 1 CVE
terragrunt-1.2.1-1.1 on GA media
These are all security issues fixed in the terragrunt-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026 -
High max 8.1openSUSE-SU-2026:12349-1 1 CVE
rsyslog-8.2608.0-4.1 on GA media
These are all security issues fixed in the rsyslog-8.2608.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2026