12,597 results · Clear filters · Feed
-
High max 7.4SUSE-SU-2026:2524-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 8.6SUSE-SU-2026:2481-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 7.3SUSE-SU-2026:2478-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue: - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 8.8SUSE-SU-2026:22212-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:2477-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue: - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 8.6SUSE-SU-2026:2476-1 2 CVEs
Security update for openvswitch3
This update for openvswitch3 fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 8.6SUSE-SU-2026:2475-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 7.3SUSE-SU-2026:2474-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 7.8SUSE-SU-2026:22234-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278). - CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411). Non security issue…
first Jun 21, 2026 -
High max 7.3SUSE-SU-2026:22228-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22210-1 1 CVE
Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22225-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22208-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22203-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22201-1 1 CVE
Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22200-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22198-1 6 CVEs
Security update for bind
This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#12655…
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22194-1 11 CVEs
Security update for freerdp
This update for freerdp fixes the following issues Update to version 3.26.0: - CVE-2026-33982: heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc() (bsc#1261222). - CVE-2026-33985: FreeRDP: Information …
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22191-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22190-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22189-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22188-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit (bsc#1267857).
first Jun 20, 2026 -
High max 8.1openSUSE-SU-2026:11109-1 4 CVEs
libssh2-1-1.11.1-3.1 on GA media
These are all security issues fixed in the libssh2-1-1.11.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 8.7openSUSE-SU-2026:11065-1 6 CVEs
freerdp-3.27.1-1.1 on GA media
These are all security issues fixed in the freerdp-3.27.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:11070-1 1 CVE
warewulf4-4.7.0-2.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 8.1openSUSE-SU-2026:11066-1 3 CVEs
nginx-1.31.2-1.1 on GA media
These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11064-1 1 CVE
ansible-core-2.20-2.20.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.20-2.20.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11062-1 1 CVE
ansible-core-2.18-2.18.18-1.1 on GA media
These are all security issues fixed in the ansible-core-2.18-2.18.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11063-1 1 CVE
ansible-core-2.19-2.19.11-1.1 on GA media
These are all security issues fixed in the ansible-core-2.19-2.19.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:11061-1 25 CVEs
ImageMagick-7.1.2.25-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.1SUSE-SU-2026:2472-1 2 CVEs
Security update for apache-sshd, jpgpj
This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability (bsc#1239551). - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git (bsc#1267018). Changes …
first Jun 19, 2026 -
High max 8.2SUSE-SU-2026:2462-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:2465-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-4046: Use pending character state in IBM1390, IBM1399 character sets (bsc#1261206, BZ #33980)
first Jun 19, 2026 -
High max 8.6SUSE-SU-2026:2463-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues Update ovn to 25.03.3: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 19, 2026 -
High max 8.2SUSE-SU-2026:2461-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 19, 2026 -
High max 8.7SUSE-SU-2026:2460-1 2 CVEs
Security update for kubernetes-old
This update for kubernetes-old fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265747). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in …
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2459-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712). - CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717). - CVE-2026-35330: i…
first Jun 18, 2026 -
High max 8.6SUSE-SU-2026:22145-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:22146-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 7.8openSUSE-SU-2026:11059-1 2 CVEs
lemon-3.53.2-2.1 on GA media
These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026