12,597 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2026:22643-1 5 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…
first Jul 13, 2026 -
High max 7.8SUSE-SU-2026:22641-1 2 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#127101…
first Jul 13, 2026 -
High max 7.1SUSE-SU-2026:22637-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
High max 8.6SUSE-SU-2026:22626-1 5 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-42311: malicious PSD file processing can lead to arbitrary code execution (bsc#1270404). - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-202…
first Jul 10, 2026 -
High max 7.1SUSE-SU-2026:22625-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22624-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22622-1 7 CVEs
Security update for agama
This update for agama fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270602). - CVE-2026-41678: openssl: incorrect bounds assertion in aes key w…
first Jul 10, 2026 -
High max 8.8SUSE-SU-2026:22621-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 8.1SUSE-SU-2026:22620-1 10 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 10, 2026 -
High max 7.8SUSE-SU-2026:22616-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22615-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
High max 8.5SUSE-SU-2026:22614-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018). - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019). - CVE-2026-56003: computeProps Property Buffe…
first Jul 10, 2026 -
High max 7.5SUSE-SU-2026:3086-1 1 CVE
Security update for python-python-socketio
This update for python-python-socketio fixes the following issues: - CVE-2026-48804: Binary attachment accumulation can cause denial of service (bsc#1269491).
first Jul 16, 2026 -
High max 7.5SUSE-SU-2026:3085-1 2 CVEs
Security update for python-python-engineio
This update for python-python-engineio fixes the following issues: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS (bsc#1269544). - CVE-2026-48809: size of in…
first Jul 16, 2026 -
High max 8.7SUSE-SU-2026:3084-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Jul 16, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…
first Jul 16, 2026 -
High max 8.9SUSE-SU-2026:2854-2 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - Regression introduced by CVE-2025-66471 fix during file download with pySSL (bsc#1270365).
first Jul 16, 2026 -
High max 7.1SUSE-SU-2026:22597-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
High max 8.7SUSE-SU-2026:22593-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
High max 8.8SUSE-SU-2026:22591-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 7.8SUSE-SU-2026:22590-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22589-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
High max 7.5openSUSE-SU-2026:11277-1 1 CVE
grafana-12.4.5-1.1 on GA media
These are all security issues fixed in the grafana-12.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11286-1 1 CVE
python315-3.15.0~b3-2.1 on GA media
These are all security issues fixed in the python315-3.15.0~b3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.1openSUSE-SU-2026:11284-1 3 CVEs
python313-langsmith-0.10.3-1.1 on GA media
These are all security issues fixed in the python313-langsmith-0.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11283-1 6 CVEs
python313-Pillow-12.3.0-2.1 on GA media
These are all security issues fixed in the python313-Pillow-12.3.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11276-1 1 CVE
gpsd-3.27.5-3.1 on GA media
These are all security issues fixed in the gpsd-3.27.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11275-1 4 CVEs
aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11274-1 3 CVEs
agama-22+398.d23cf880d-49.1 on GA media
These are all security issues fixed in the agama-22+398.d23cf880d-49.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set net…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3054-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3058-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence …
first Jul 15, 2026 -
High max 7.7SUSE-SU-2026:3055-1 1 CVE
Security update for radvd
This update for radvd fixes the following issue - CVE-2026-48715: stack-based buffer overflow in the `radvdump` Route Information option parser when processing crafted ICMPv6 Router Advertisements (bsc#1268641).
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3053-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3046-1 8 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CV…
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11285-1 3 CVEs
python310-3.10.20-7.1 on GA media
These are all security issues fixed in the python310-3.10.20-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3047-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#12710…
first Jul 15, 2026 -
High max 8.3SUSE-SU-2026:3039-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issue - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3041-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3040-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callba…
first Jul 15, 2026