12,597 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2026:21101-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 19, 2026 -
High max 7.3openSUSE-SU-2026:21100-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:21097-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issue - CVE-2026-11332: argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).
first Jun 19, 2026 -
High max 8.8openSUSE-SU-2026:21096-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.4openSUSE-SU-2026:21095-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026 -
High max 8.2openSUSE-SU-2026:21093-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21092-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
first Jun 18, 2026 -
High max 7.4openSUSE-SU-2026:21091-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 18, 2026 -
High max 7.8openSUSE-SU-2026:21090-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21088-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21071-1 32 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues Security issues: - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: Denial of Serv…
first Jun 26, 2026 -
High max 7.7openSUSE-SU-2026:21067-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 7.5openSUSE-SU-2026:21066-1 4 CVEs
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling (bsc#1268506). - CVE-2026-53538: urlencoded requests containing semicolons can lead to fo…
first Jun 26, 2026 -
High max 7.6openSUSE-SU-2026:21061-1 4 CVEs
Security update for libaom
This update for libaom fixes the following issues - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-plane pixel values ca…
first Jun 25, 2026 -
High max 7.7openSUSE-SU-2026:21058-1 26 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues Update to 22.23.0: - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479). - CVE-2026-9496: pacote: excessive CPU consump…
first Jun 25, 2026 -
High max 7.5openSUSE-SU-2026:21053-1 3 CVEs
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389). - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.…
first Jun 24, 2026 -
High max 8.8openSUSE-SU-2026:21038-1 8 CVEs
Security update for 7zip
This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858). - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (…
first Jun 23, 2026 -
High max 7.4openSUSE-SU-2026:21023-1 3 CVEs
Security update for libexif
This update for libexif fixes the following issues - CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755). - CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#126200…
first Jun 22, 2026 -
High max 7.2openSUSE-SU-2026:21017-1 1 CVE
Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit() (bsc#1263898).
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21015-1 18 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content (bsc#1261236). - CVE-2026-0397: CORS misconfiguration can lead to information disclosure (bsc#1261237). - CVE-2026-24028: crafted DNS resp…
first Jun 22, 2026 -
High max 8.6openSUSE-SU-2026:21012-1 1 CVE
Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21004-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issues: Changes in gsasl: - CVE-2026-48829: DIGEST-MD5: Fix NULL pointer dereference in parser (bsc#1266371)
first Jun 22, 2026 -
High max 7.8openSUSE-SU-2026:20995-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278). - CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411). Non security issue…
first Jun 21, 2026 -
High max 7.7SUSE-SU-2026:22286-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 8.1SUSE-SU-2026:22284-1 2 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). - CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).
first Jun 25, 2026 -
High max 7.5SUSE-SU-2026:22273-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.722.gdd9d67ff5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jun 24, 2026 -
High max 8.1openSUSE-SU-2026:21057-1 2 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). - CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).
first Jun 25, 2026 -
High max 7.1openSUSE-SU-2026:21055-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135).
first Jun 25, 2026 -
High max 7.5openSUSE-SU-2026:21054-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.722.gdd9d67ff5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jun 24, 2026 -
High max 8.7openSUSE-SU-2026:20998-1 2 CVEs
Security update for tree-sitter-ruby
This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js (bsc#1244345). - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass (bsc#1250517)…
first Jun 22, 2026 -
High max 7.3openSUSE-SU-2026:20992-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
first Jun 20, 2026 -
High max 7.2SUSE-SU-2026:22254-1 1 CVE
Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit() (bsc#1263898).
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21173-1 2 CVEs
Security update for python-pydata-sphinx-theme
This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - Refresh js dependencies: * ws to 7.5.11 (bsc#1268957, CVE-2026-48779) - Refresh vendored tarball (CVE-2026-6321, bsc#1264374)
first Jun 29, 2026 -
High max 8.2openSUSE-SU-2026:21076-1 1 CVE
Security update for giflib
This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
first Jun 28, 2026 -
High max 8.1SUSE-SU-2026:2668-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: xen: x86 HVM I/O port list traversal (XSA-491) (bsc#1266952). - CVE-2026-42488: xen: x86: mismatched mapcache metadata (XSA-494) (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: xen: domctl lock…
first Jun 29, 2026 -
High max 8.3openSUSE-SU-2026:21163-1 3 CVEs
Security update for yt-dlp
This update for yt-dlp fixes the following issues: Changes in yt-dlp: - Update to version 2026.06.09 * Fixed [CVE-2026-50019]: File Downloader cookie leak with curl * Fixed [CVE-2026-50023]: Dangerous file type creation via insufficient filename sanitization …
first Jun 29, 2026 -
High max 8.1openSUSE-SU-2026:11151-1 1 CVE
socat-1.8.1.3-1.1 on GA media
These are all security issues fixed in the socat-1.8.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
High max 7.5openSUSE-SU-2026:11149-1 2 CVEs
python311-pytest-html-4.2.0-3.1 on GA media
These are all security issues fixed in the python311-pytest-html-4.2.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
High max 8.2openSUSE-SU-2026:11147-1 3 CVEs
python-lxml-doc-6.1.1-1.1 on GA media
These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
High max 7.5openSUSE-SU-2026:11146-1 1 CVE
libonnxruntime1-1.26.0-1.1 on GA media
These are all security issues fixed in the libonnxruntime1-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026