12,597 results · Clear filters · Feed
-
High max 8.6SUSE-SU-2026:2970-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jul 14, 2026 -
High max 7.3SUSE-SU-2026:2987-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-5435: resolv: More types as unknown in ns_sprintrrf (bsc#1263656, BZ #34033) - resolv: Check for inet_ntop failure in ns_sprintrrf - CVE-2026-6238: resolv: Fix buffer overreads in ns_sprintrrf (bsc#…
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2975-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:2969-1 15 CVEs
Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-5401: AFP dissector crash (bsc#1263756). - CVE-2026-5403: SBC audio codec crash (bsc#1263765). - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766). - CVE-2026-5406: FC-SWILS dissector crash …
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:2948-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jul 14, 2026 -
High max 8.2SUSE-SU-2026:2924-1 6 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive (bsc#1263707). - CVE-2026-5260: heap overread when processing extremely short premas…
first Jul 13, 2026 -
High max 8.2SUSE-SU-2026:2923-1 6 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive (bsc#1263707). - CVE-2026-5260: heap overread when processing extremely short premas…
first Jul 13, 2026 -
High max 8.7SUSE-SU-2026:22554-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 9, 2026 -
High max 8.2SUSE-SU-2026:22545-1 11 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…
first Jul 7, 2026 -
High max 7.5SUSE-SU-2026:22544-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
High max 7.3SUSE-SU-2026:22538-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 3, 2026 -
High max 8.1SUSE-SU-2026:2877-1 42 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder …
first Jul 13, 2026 -
High max 8.7openSUSE-SU-2026:11262-1 7 CVEs
sdbootutil-1+git20260713.d869cf8-1.1 on GA media
These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 13, 2026 -
High max 8.3SUSE-SU-2026:2878-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issue - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Jul 13, 2026 -
High max 7.5SUSE-SU-2026:2875-1 4 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-2026-54060: a font can trigger excessive allocation during conversion or saving (bsc#1270410). - CVE-20…
first Jul 13, 2026 -
High max 7.7openSUSE-SU-2026:21312-1 1 CVE
Security update for python-pytest-html
This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor updating brace-expansion: - force brace-expansion minimum version to fix CVE-2026-13149 (bsc#1269923)
first Jul 10, 2026 -
High max 8.0openSUSE-SU-2026:21310-1 2 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.96.0: * Critical security fix: patched vulnerability in gh codespace jupyter that could allow command execution when connecting to malicious Codespaces * Merge commit from for…
first Jul 10, 2026 -
High max 8.6openSUSE-SU-2026:21296-1 5 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-42311: malicious PSD file processing can lead to arbitrary code execution (bsc#1270404). - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-202…
first Jul 10, 2026 -
High max 7.1openSUSE-SU-2026:21295-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21294-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21292-1 7 CVEs
Security update for agama
This update for agama fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270602). - CVE-2026-41678: openssl: incorrect bounds assertion in aes key w…
first Jul 10, 2026 -
High max 8.1openSUSE-SU-2026:21291-1 10 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 10, 2026 -
High max 8.8openSUSE-SU-2026:21290-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 7.8openSUSE-SU-2026:21289-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21285-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
High max 8.5openSUSE-SU-2026:21284-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018). - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019). - CVE-2026-56003: computeProps Property Buffe…
first Jul 10, 2026 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent pr…
first Jul 11, 2026 -
High max 8.9SUSE-SU-2026:2854-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file download with pySSL (bsc#1270365).
first Jul 10, 2026 -
High max 7.8SUSE-SU-2026:2853-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when proces…
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:11255-1 6 CVEs
afterburn-5.10.0.git73.b97f772-1.1 on GA media
These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
High max 8.7openSUSE-SU-2026:21274-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 9, 2026 -
High max 7.5openSUSE-SU-2026:11252-1 4 CVEs
wget-1.25.0-3.1 on GA media
These are all security issues fixed in the wget-1.25.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
High max 7.8openSUSE-SU-2026:11251-1 5 CVEs
traefik-3.7.7-1.1 on GA media
These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
High max 7.1openSUSE-SU-2026:11246-1 2 CVEs
libnfs-devel-6.0.2-1.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
High max 7.5SUSE-SU-2026:2850-1 1 CVE
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provid…
first Jul 10, 2026 -
High max 7.4SUSE-SU-2026:2838-1 3 CVEs
Security update for libexif
This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000) - CVE-2026-40386: Fixed denial of service and information disclosure via integer under…
first Jul 10, 2026 -
High max 7.4SUSE-SU-2026:2837-1 3 CVEs
Security update for libexif
This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000) - CVE-2026-40386: Fixed denial of service and information disclosure via integer under…
first Jul 10, 2026 -
High max 7.5SUSE-SU-2026:2845-1 1 CVE
Security update for perl-List-SomeUtils-XS
This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).
first Jul 10, 2026 -
High max 7.6SUSE-SU-2026:2844-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).
first Jul 10, 2026 -
High max 7.6SUSE-SU-2026:2843-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).
first Jul 10, 2026