12,597 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2026:11122-1 5 CVEs
glances-common-4.5.5-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 7.5SUSE-SU-2026:2624-1 7 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues Update to version jdk8u492: Security issues: - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490). - CVE-2026-22013: unauthenticated attacker with…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2623-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2622-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3950: manipulation of the component st…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2621-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 24, 2026 -
High max 7.1SUSE-SU-2026:2619-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issues Security issues: - CVE-2025-64720: buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159). Non security issue: - version update to 1.5.30 (jsc#PED-16191). Changes…
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:2617-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-5946: Inval…
first Jun 24, 2026 -
High max 8.1SUSE-SU-2026:2613-1 5 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066). - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026…
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:2616-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-5946: Inval…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2614-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 24, 2026 -
High max 7.5openSUSE-SU-2026:20977-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 17, 2026 -
High max 8.8openSUSE-SU-2026:20974-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3949: manipulation of the argument siz…
first Jun 17, 2026 -
High max 7.8SUSE-SU-2026:22218-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 8.8SUSE-SU-2026:22184-1 9 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22183-1 8 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22163-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:22156-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:22155-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 17, 2026 -
High max 8.6SUSE-SU-2026:22152-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
High max 7.5openSUSE-SU-2026:20976-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 17, 2026 -
High max 7.5
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …
first Jun 17, 2026 -
High max 7.5openSUSE-SU-2026:20973-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 8.6openSUSE-SU-2026:20972-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
High max 8.8openSUSE-SU-2026:20970-1 10 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 16, 2026 -
High max 8.6openSUSE-SU-2026:20966-1 1 CVE
Security update for editorconfig-core-c
This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: l_pattern buffer overflow (bsc#1262131).
first Jun 15, 2026 -
High max 7.5SUSE-SU-2026:22224-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22221-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22220-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22216-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
High max 8.4SUSE-SU-2026:22186-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant (DAG) flow (bsc#1266662). Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: * Update cargo vet audits …
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22185-1 5 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues - CVE-2026-27851: lib-var-expand: safe filter leaks to all following pipelines (bsc#1265146). - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-4001…
first Jun 19, 2026 -
High max 8.4SUSE-SU-2026:22182-1 1 CVE
Security update for papers
This update for papers fixes the following issues Security issue: - CVE-2026-46529: command injection (bsc#1265880). Changes for papers: - Update to version 48.10 (bsc#1265880): - Update to version 48.9 (jsc#PED-15957, bsc#1261947): - Bug fixes: - Saved image…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22181-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
first Jun 19, 2026 -
High max 8.1SUSE-SU-2026:22178-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22177-1 8 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 7.8SUSE-SU-2026:22175-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 19, 2026 -
High max 7.3SUSE-SU-2026:22174-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22172-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.8SUSE-SU-2026:22171-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issue - CVE-2026-11332: argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22170-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026