12,597 results · Clear filters · Feed
-
High max 8.4openSUSE-SU-2026:21374-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping (bsc#1271194). - CVE-2026-59857: out-of-bounds write in SAL soundfol…
first Jul 18, 2026 -
High max 8.8openSUSE-SU-2026:21370-1 9 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12891: unchecked aspect_ratio_idc value used as an array index in the H.266 parser could cause a global out- of-bounds read (bsc#1268872). - CVE-2026-12892: 1-byte heap out-of-bounds …
first Jul 18, 2026 -
High max 7.2SUSE-SU-2026:22737-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Jul 9, 2026 -
High max 8.1openSUSE-SU-2026:11320-1 9 CVEs
libntfs-3g-devel-2022.10.3-8.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
High max 8.7SUSE-SU-2026:3152-1 7 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270542). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion i…
first Jul 21, 2026 -
High max 7.8SUSE-SU-2026:3151-1 8 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CV…
first Jul 21, 2026 -
High max 7.5SUSE-SU-2026:3148-1 6 CVEs
Security update for wget
This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buff…
first Jul 21, 2026 -
High max 7.0openSUSE-SU-2026:11319-1 1 CVE
7zip-26.02-1.1 on GA media
These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
High max 8.2SUSE-SU-2026:22664-1 10 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the `jvp_string_append()` and `jvp_string_copy_replace_bad` functions can lead to heap buffer overflow when evaluating untrusted jq queries (bsc#1262044). - CVE-2026-3394…
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:22663-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:11318-1 3 CVEs
python313-pyasn1-0.6.4-1.1 on GA media
These are all security issues fixed in the python313-pyasn1-0.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.5openSUSE-SU-2026:11315-1 5 CVEs
libgit2-1_9-1.9.6-1.1 on GA media
These are all security issues fixed in the libgit2-1_9-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.1openSUSE-SU-2026:11312-1 3 CVEs
acl-2.4.0-1.1 on GA media
These are all security issues fixed in the acl-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.3SUSE-SU-2026:3140-1 9 CVEs
Security update for libreoffice
This update for libreoffice fixes the following issues: Update to LibreOffice 26.2.5.1. Security issues fixed: - CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters (bsc#1264357). - CVE-2026-6039: denial o…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3138-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues - Update to version 2.7.0~git212.9b0755edb. - CVE-2026-11610: heap buffer overflow in `sasl_io_recv()` via padded SASL UNBIND (bsc#1270695). - CVE-2026-11611: content synchronization persistent search plugin c…
first Jul 20, 2026 -
High max 7.2SUSE-RU-2026:2769-1 2 CVEs
Recommended update 5.1.4 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808) - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804) - Improved shutdown rel…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3139-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3137-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 2.2.10~git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap buffer overflow when processing a specially crafted oversized LD…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3136-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 2.2.10~git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap buffer overflow when processing a specially crafted oversized LD…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3133-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence …
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3131-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3125-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence…
first Jul 20, 2026 -
High max 7.5openSUSE-SU-2026:21366-1 2 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331) - CVE-2026-8595: Fix stored XSS in the table panel (bsc#1271557)
first Jul 17, 2026 -
High max 8.2openSUSE-SU-2026:11308-1 5 CVEs
libsuricata8_0_6-8.0.6-1.1 on GA media
These are all security issues fixed in the libsuricata8_0_6-8.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
High max 8.7openSUSE-SU-2026:11307-1 1 CVE
kubevirt1.8-container-disk-1.8.4-1.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
High max 8.2SUSE-SU-2026:3115-1 1 CVE
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue - CVE-2026-34253: buffer underflow in the `ogg123` utility in function `remotethread` of `remote.c` (bsc#1265361).
first Jul 17, 2026 -
High max 8.2SUSE-SU-2026:3114-1 1 CVE
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue - CVE-2026-34253: buffer underflow in the `ogg123` utility in function `remotethread` of `remote.c` (bsc#1265361).
first Jul 17, 2026 -
High max 7.5SUSE-SU-2026:3113-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
first Jul 17, 2026 -
High max 8.8SUSE-SU-2026:3105-1 9 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …
first Jul 17, 2026 -
High max 7.8SUSE-SU-2026:3102-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#12710…
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11302-1 2 CVEs
trivy-0.72.0-2.1 on GA media
These are all security issues fixed in the trivy-0.72.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11300-1 1 CVE
php-composer2-2.10.2-2.1 on GA media
These are all security issues fixed in the php-composer2-2.10.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.1openSUSE-SU-2026:11297-1 1 CVE
oras-1.3.3-2.1 on GA media
These are all security issues fixed in the oras-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 8.2openSUSE-SU-2026:11295-1 3 CVEs
nginx-1.31.3-1.1 on GA media
These are all security issues fixed in the nginx-1.31.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11292-1 1 CVE
helm3-3.21.3-2.1 on GA media
These are all security issues fixed in the helm3-3.21.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11291-1 1 CVE
helm-4.2.3-2.1 on GA media
These are all security issues fixed in the helm-4.2.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.3openSUSE-SU-2026:21359-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow (bsc#1270299) - CVE-2026-58380: Fix buffer overflow in pnmscanner_gettoken (bsc#1270444) - CVE-2026-58381: Prevent double-freeing PSP…
first Jul 15, 2026 -
High max 7.5SUSE-SU-2026:22660-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:22656-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:22655-1 10 CVEs
Security update for python-mistune
This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in `formatting.py` can lead to DoS (bsc#1271117). - CVE-2026-59923: `HTMLRenderer.safe_url()` does not block percent-encoded javasc…
first Jul 14, 2026