12,597 results · Clear filters · Feed
-
High max 7.1SUSE-SU-2026:3037-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
High max 7.1SUSE-SU-2026:3036-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
High max 7.1SUSE-SU-2026:3035-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3030-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3029-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3027-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3026-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3025-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3024-1 27 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: denial of Service due to resour…
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3023-1 41 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: denial of Service due to resour…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3022-1 14 CVEs
Security update for sccache
This update for sccache fixes the following issues: Update to version 0.15.0~17. - CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes `HTTP2 RST_STREAM` frames (bsc#1210346). - CVE-2024-32650: rust-rustls: i…
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3009-1 3 CVEs
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set n…
first Jul 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3001-1 8 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43366: io_uring/kbuf:…
first Jul 15, 2026 -
High max 7.3openSUSE-SU-2026:21346-1 8 CVEs
Security update for libredwg
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 * fix dwg_next_entity NULL pointer dereference [CVE-2026-15184, boo#1271170] * Fix dwg_bmp thumbnail overflow checks [CVE-2026-15181, boo#1271169] * Resol…
first Jul 13, 2026 -
High max 7.8openSUSE-SU-2026:21324-1 5 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…
first Jul 13, 2026 -
High max 7.8openSUSE-SU-2026:21321-1 2 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#127101…
first Jul 13, 2026 -
High max 7.1openSUSE-SU-2026:21318-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
High max 7.5SUSE-SU-2026:22587-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
High max 8.7SUSE-SU-2026:22583-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 9, 2026 -
High max 7.5SUSE-SU-2026:22574-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues: Update to version 1.5.3. Security issues fixed: - CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning (bsc#1270107). - CVE-2026-20214: out-of-bounds wri…
first Jul 7, 2026 -
High max 7.5SUSE-SU-2026:22573-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issue: - CVE-2026-30997: out-of-bounds read in the `read_global_param()` function allows for a DoS via crafted input (bsc#1262047).
first Jul 7, 2026 -
High max 8.2SUSE-SU-2026:22566-1 11 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…
first Jul 7, 2026 -
High max 7.7SUSE-SU-2026:22565-1 21 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues Update to version 24.18.0 (bsc#1269825). Security issues fixed: - CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: response queue pois…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:22559-1 1 CVE
Security update for perl-List-SomeUtils-XS
This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:22557-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
High max 8.3openSUSE-SU-2026:11265-1 1 CVE
libpng12-0-1.2.59-6.1 on GA media
These are all security issues fixed in the libpng12-0-1.2.59-6.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.3openSUSE-SU-2026:11264-1 2 CVEs
gimp-3.2.4-2.1 on GA media
These are all security issues fixed in the gimp-3.2.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 8.6openSUSE-SU-2026:11263-1 3 CVEs
freerdp-3.28.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.28.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:2950-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21342-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 14, 2026 -
High max 7.8openSUSE-SU-2026:21341-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21333-1 2 CVEs
Security update for nasm
This update for nasm fixes the following issues - CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the obj_directive() function (bsc#1261986). - CVE-2026-6068: heap use after free vulnerability in response file processing …
first Jul 13, 2026 -
High max 7.0openSUSE-SU-2026:11268-1 3 CVEs
php-composer2-2.10.2-1.1 on GA media
These are all security issues fixed in the php-composer2-2.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21339-1 10 CVEs
Security update for python-mistune
This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in `formatting.py` can lead to DoS (bsc#1271117). - CVE-2026-59923: `HTMLRenderer.safe_url()` does not block percent-encoded javasc…
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:11272-1 2 CVEs
python313-slixmpp-1.16.0-2.1 on GA media
These are all security issues fixed in the python313-slixmpp-1.16.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:2993-1 5 CVEs
Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: preven…
first Jul 14, 2026 -
High max 8.2SUSE-SU-2026:2983-1 5 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the `jvp_string_append()` and `jvp_string_copy_replace_bad` functions can lead to heap buffer overflow when evaluating untrusted jq queries (bsc#1262044). - CVE-2026-3394…
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2977-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2976-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026