12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:22168-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
first Jun 18, 2026 -
High max 8.2SUSE-SU-2026:22167-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 18, 2026 -
High max 7.8SUSE-SU-2026:22166-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 7.4SUSE-SU-2026:22165-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:22154-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:22153-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3949: manipulation of the argument siz…
first Jun 17, 2026 -
High max 7.5
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:22149-1 10 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 16, 2026 -
High max 8.1openSUSE-SU-2026:11095-1 11 CVEs
ofono-2.19-3.1 on GA media
These are all security issues fixed in the ofono-2.19-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:11090-1 2 CVEs
haproxy-3.4.0+git31.fc300e9f2-1.1 on GA media
These are all security issues fixed in the haproxy-3.4.0+git31.fc300e9f2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.3openSUSE-SU-2026:11089-1 1 CVE
hamlib-4.7.2-1.1 on GA media
These are all security issues fixed in the hamlib-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 8.8openSUSE-SU-2026:11088-1 2 CVEs
gstreamer-plugins-bad-1.28.4+24-1.1 on GA media
These are all security issues fixed in the gstreamer-plugins-bad-1.28.4+24-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 8.3openSUSE-SU-2026:11074-1 1 CVE
containerized-data-importer1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.8openSUSE-SU-2026:11114-1 5 CVEs
gvim-9.2.0530-1.1 on GA media
These are all security issues fixed in the gvim-9.2.0530-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 8.7openSUSE-SU-2026:11112-1 3 CVEs
python311-py7zr-1.1.3-1.1 on GA media
These are all security issues fixed in the python311-py7zr-1.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 8.6openSUSE-SU-2026:11111-1 1 CVE
pacemaker-3.0.2+20260616.4544f351-1.1 on GA media
These are all security issues fixed in the pacemaker-3.0.2+20260616.4544f351-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 8.1openSUSE-SU-2026:11110-1 37 CVEs
nodejs26-26.3.1-1.1 on GA media
These are all security issues fixed in the nodejs26-26.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 7.5openSUSE-SU-2026:11098-1 1 CVE
python311-nltk-3.10.0rc1-1.1 on GA media
These are all security issues fixed in the python311-nltk-3.10.0rc1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:11076-1 1 CVE
dracut-110+suse.35.g9834432-1.1 on GA media
These are all security issues fixed in the dracut-110+suse.35.g9834432-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:11073-1 5 CVEs
bitcoin-qt6-31.0-2.1 on GA media
These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2599-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2598-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2590-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2579-1 2 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2026-33997: Fixed privilege validation bypass during plugin (bsc#1265907). - CVE-2026-34040: Fixed Authz zero length regression (bsc#1265929).
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2578-1 4 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues - CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages that cause files to be written outside of the BuildKit state directory (bsc#1260967). - CVE-2026-33748: github.com/…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2575-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
High max 7.5SUSE-SU-2026:2580-1 29 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation …
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2553-1 2 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues The following security issues were fixed: - CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). - CVE-2026-46323: net: gro: don't merge zcopy skbs (bs…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2531-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
High max 7.8SUSE-SU-2026:2527-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2523-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 7.5SUSE-SU-2026:2487-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues - CVE-2026-26961: rack: mismatch in header handling can allow to smuggle multipart content (bsc#1261398). - CVE-2026-26962: rack: improper unfolding of folded multipart headers can lead to header injection…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2515-1 2 CVEs
Security update for openssh, openssh-askpass-gnome
This update for openssh, openssh-askpass-gnome fixes the following issues - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430).
first Jun 23, 2026 -
High max 7.5SUSE-SU-2026:2490-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2488-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jun 22, 2026 -
High max 8.2SUSE-SU-2026:2486-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2484-1 1 CVE
Security update for terraform-provider-local, terraform-provider-null
This update for terraform-provider-local, terraform-provider-null fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265658).
first Jun 22, 2026 -
High max 7.4SUSE-SU-2026:2530-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2529-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 7.8SUSE-SU-2026:2528-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 23, 2026