12,597 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:11196-1 1 CVE
python313-yt-dlp-2026.07.04-1.1 on GA media
These are all security issues fixed in the python313-yt-dlp-2026.07.04-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 7.2openSUSE-SU-2026:11194-1 1 CVE
sdbootutil-1+git20260706.f9f4faf-1.1 on GA media
These are all security issues fixed in the sdbootutil-1+git20260706.f9f4faf-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 7.0openSUSE-SU-2026:11193-1 2 CVEs
librpmbuild10-4.20.1-8.1 on GA media
These are all security issues fixed in the librpmbuild10-4.20.1-8.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 8.2openSUSE-SU-2026:11191-1 1 CVE
python313-lxml_html_clean-0.4.5-1.1 on GA media
These are all security issues fixed in the python313-lxml_html_clean-0.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2779-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-5946: Inval…
first Jul 6, 2026 -
High max 7.2SUSE-SU-2026:2777-1 1 CVE
Security update for cryptsetup, s390-tools
This update for cryptsetup, s390-tools fixes the following issue Security fixes: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185). Changes for s390-tools: - Upgrade s390-tools to ver…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2766-1 1 CVE
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 (bsc#1248707) golang-github-boynux-squid_exporter: - Non customer facing changes golang-gi…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2765-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2764-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2763-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.1SUSE-SU-2026:2760-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135). Changes for libnfs: - Add libnfs-CVE-2026-53689.patch: ZDR: check the string size for sanity (bsc#1268135 CVE-2026-5…
first Jul 6, 2026 -
High max 7.3openSUSE-SU-2026:21228-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:21231-1 1 CVE
Security update for python-pydata-sphinx-theme
This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - CVE-2026-13676: fast-uri: failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs allows for bypass (bsc#1269597) * revendor the vendore…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:21230-1 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-46604: TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset (bsc#1269600) - Update to version 6.6.3 * Various bug fixes
first Jul 3, 2026 -
High max 8.7openSUSE-SU-2026:11183-1 1 CVE
python313-joserfc-1.7.2-2.1 on GA media
These are all security issues fixed in the python313-joserfc-1.7.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2026 -
High max 7.5openSUSE-SU-2026:11182-1 8 CVEs
clamav-1.5.3-1.1 on GA media
These are all security issues fixed in the clamav-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2026 -
High max 7.5SUSE-SU-2026:22454-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).
first Jun 30, 2026 -
High max 7.3SUSE-SU-2026:22453-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jun 30, 2026 -
High max 7.1SUSE-SU-2026:22447-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135).
first Jun 29, 2026 -
High max 7.5SUSE-SU-2026:22446-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.643.g1f1d880: * fix(network-legacy): sanitize DHCP values in dhclient-scri…
first Jun 29, 2026 -
High max 7.7SUSE-SU-2026:22445-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 8.6SUSE-SU-2026:2742-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jul 3, 2026 -
High max 8.8SUSE-SU-2026:2739-1 3 CVEs
Security update for fontforge
This update for fontforge fixes the following issues - CVE-2025-15269: Remote Code Execution via Use-After-Free in SFD file parsing (bsc#1256032). - CVE-2025-15275: Arbitrary code execution via SFD file parsing buffer overflow (bsc#1256025). - CVE-2025-15279:…
first Jul 3, 2026 -
High max 8.6SUSE-SU-2026:2731-1 1 CVE
Security update for editorconfig-core-c
This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: improper use of `strcpy` can lead to a stack buffer overflow (bsc#1262131).
first Jul 2, 2026 -
High max 7.5SUSE-SU-2026:2729-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 2, 2026 -
High max 7.5SUSE-SU-2026:2750-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2748-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2747-1 4 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928). - CVE-20…
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2728-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 2, 2026 -
High max 7.1SUSE-SU-2026:2744-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 3, 2026 -
High max 7.1SUSE-SU-2026:2743-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 3, 2026 -
High max 8.1openSUSE-SU-2026:21201-1 4 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation (bsc#1268897). - CVE-…
first Jul 1, 2026 -
High max 8.6openSUSE-SU-2026:21196-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026 -
High max 7.5openSUSE-SU-2026:21192-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). Changes for dnsmasq: * CVE-2026-12725, bsc#1268764: Heap buffer overflow in `l…
first Jun 29, 2026 -
High max 8.7openSUSE-SU-2026:21191-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parse_link_text (bsc#1269091).
first Jun 29, 2026 -
High max 7.5SUSE-SU-2026:22431-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.609.g1a2492e: * fix(network-legacy): sanitize DHCP values in dhclient-scri…
first Jun 29, 2026 -
High max 7.7SUSE-SU-2026:22430-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 7.5SUSE-SU-2026:2673-1 6 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE…
first Jul 2, 2026 -
High max 7.1openSUSE-SU-2026:21204-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 2, 2026 -
High max 8.7openSUSE-SU-2026:11180-1 1 CVE
python311-mistune-3.3.2-1.1 on GA media
These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2026