12,597 results · Clear filters · Feed
-
High max 7.1openSUSE-SU-2026:11219-1 1 CVE
perl-HTTP-Tiny-0.096-2.1 on GA media
These are all security issues fixed in the perl-HTTP-Tiny-0.096-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 7.1openSUSE-SU-2026:11218-1 5 CVEs
libIex-3_4-33-3.4.13-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 7.5openSUSE-SU-2026:11217-1 2 CVEs
nasm-3.02-1.1 on GA media
These are all security issues fixed in the nasm-3.02-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 8.7openSUSE-SU-2026:21266-1 3 CVEs
Security update for openQA, os-autoinst
This update for openQA, os-autoinst fixes the following issues: Changes in openQA: - Update to version 5.1783076943.6691832d: * test: Stabilize `t/05-scheduler-full.t` - Clarify resolution of three CVEs * The following CVEs have been fixed (see previous chang…
first Jul 6, 2026 -
High max 7.5openSUSE-SU-2026:21258-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issue: - CVE-2026-30997: out-of-bounds read in the `read_global_param()` function allows for a DoS via crafted input (bsc#1262047).
first Jul 7, 2026 -
High max 7.0openSUSE-SU-2026:21249-1 2 CVEs
Security update for trivy
This update for trivy fixes the following issues Update to version 0.72.0. - CVE-2026-54448: tar unpacker reads scanned Helm chart archives (.tgz) with `io.ReadAll(tr)` and defines no size limit, which can lead to a DoS (bsc#1269271). - CVE-2026-55092: `org.o…
first Jul 7, 2026 -
High max 8.2openSUSE-SU-2026:21248-1 11 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:21252-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues: Update to version 1.5.3. Security issues fixed: - CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning (bsc#1270107). - CVE-2026-20214: out-of-bounds wri…
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:21245-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
High max 7.7openSUSE-SU-2026:21236-1 21 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues Update to version 24.18.0 (bsc#1269825). Security issues fixed: - CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: response queue pois…
first Jul 6, 2026 -
High max 8.8
kernel-devel-7.1.3-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 7.8openSUSE-SU-2026:11212-1 2 CVEs
go1.25-1.25.12-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 8.7openSUSE-SU-2026:11210-1 8 CVEs
cargo-c-0.10.23-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 7.3openSUSE-SU-2026:11225-1 1 CVE
libtiff-devel-32bit-4.7.2-1.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 8.7openSUSE-SU-2026:11224-1 7 CVEs
sccache-0.16.0~0-3.1 on GA media
These are all security issues fixed in the sccache-0.16.0~0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 8.7openSUSE-SU-2026:11223-1 7 CVEs
rustup-1.28.2~0-5.1 on GA media
These are all security issues fixed in the rustup-1.28.2~0-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 8.7openSUSE-SU-2026:11222-1 8 CVEs
keylime-ima-policy-0.2.9+49-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.9+49-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
High max 7.1openSUSE-SU-2026:11207-1 1 CVE
libsuricata8_0_5-8.0.5-2.1 on GA media
These are all security issues fixed in the libsuricata8_0_5-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.2openSUSE-SU-2026:11206-1 1 CVE
sccache-0.16.0~0-2.1 on GA media
These are all security issues fixed in the sccache-0.16.0~0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.2openSUSE-SU-2026:11205-1 1 CVE
rustup-1.28.2~0-4.1 on GA media
These are all security issues fixed in the rustup-1.28.2~0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:11203-1 2 CVEs
python313-httplib2-0.32.0-1.1 on GA media
These are all security issues fixed in the python313-httplib2-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.1openSUSE-SU-2026:11202-1 1 CVE
python313-Protego-0.6.2-1.1 on GA media
These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 8.2openSUSE-SU-2026:11200-1 3 CVEs
heroic-games-launcher-2.22.0-4.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.22.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 8.7SUSE-SU-2026:2804-1 3 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: - CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files (TLS keys, tokens, service-account creds) from the exporter pod. (bsc#1266733) - …
first Jul 8, 2026 -
High max 7.5SUSE-SU-2026:2803-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.565.g682306ec5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2793-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in `BitmapScaleBitmaps` can lead to a heap buffer overflow (bsc#1269018). - CVE-2026-56002: insufficient checks in `pcfReadFont` can lead to a heap buffer overflow (bsc#12…
first Jul 8, 2026 -
High max 8.7SUSE-SU-2026:2783-1 3 CVEs
Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues: - CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files (TLS keys, tokens, service-account creds) from the exporter pod. (bsc#1266733…
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:21218-1 1 CVE
Security update for perl-List-SomeUtils-XS
This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).
first Jul 6, 2026 -
High max 8.7SUSE-SU-2026:2802-1 18 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issue This update for netty, netty-tcnative fixes the following issues Upgrade netty to upstream version 4.1.135, netty-tcnative to upstream version 2.0.79: - CVE-2026-44249: IPv6 Subnet Filter Bypass …
first Jul 8, 2026 -
High max 8.1SUSE-SU-2026:2801-1 4 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic …
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2794-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in `BitmapScaleBitmaps` can lead to a heap buffer overflow (bsc#1269018). - CVE-2026-56002: insufficient checks in `pcfReadFont` can lead to a heap buffer overflow (bsc#12…
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2792-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issue - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
first Jul 8, 2026 -
High max 7.5SUSE-SU-2026:2782-1 2 CVEs
Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues - CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546). - CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter …
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2754-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2752-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issue - CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 3, 2026 -
High max 8.6SUSE-SU-2026:22510-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026 -
High max 8.1SUSE-SU-2026:22504-1 4 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation (bsc#1268897). - CVE-…
first Jul 1, 2026 -
High max 7.5SUSE-SU-2026:22496-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). Changes for dnsmasq: * CVE-2026-12725, bsc#1268764: Heap buffer overflow in `l…
first Jun 29, 2026 -
High max 8.7SUSE-SU-2026:22495-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parse_link_text (bsc#1269091).
first Jun 29, 2026 -
High max 8.6SUSE-SU-2026:22493-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026