12,597 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:11056-1 1 CVE
inspektor-gadget-0.53.2-1.1 on GA media
These are all security issues fixed in the inspektor-gadget-0.53.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 8.3openSUSE-SU-2026:11054-1 1 CVE
containerized-data-importer-1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 8.4SUSE-SU-2026:2458-1 7 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251). - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001). - CVE-…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2457-1 4 CVEs
Security update for frr
This update for frr fixes the following issue: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2455-1 4 CVEs
Security update for frr
This update for frr fixes the following issues - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2453-1 7 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490). - CVE-2026-22013: unauthenticated attacker with network access can access to critical data (bsc#…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2454-1 4 CVEs
Security update for frr
This update for frr fixes the following issues Update to frr 8.5.7: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026…
first Jun 18, 2026 -
High max 8.8SUSE-SU-2026:22143-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CV…
first Jun 11, 2026 -
High max 7.4SUSE-SU-2026:22138-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:22134-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 12, 2026 -
High max 7.3openSUSE-SU-2026:11048-1 1 CVE
trivy-0.71.1-2.1 on GA media
These are all security issues fixed in the trivy-0.71.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
High max 7.8openSUSE-SU-2026:11047-1 3 CVEs
traefik-3.7.5-1.1 on GA media
These are all security issues fixed in the traefik-3.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
High max 7.8SUSE-SU-2026:2437-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-5405: RDP dissector crash (bsc#1263767). - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:2430-1 4 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues - CVE-2026-3497: Information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-…
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:2428-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459).
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:2427-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459).
first Jun 17, 2026 -
High max 8.6SUSE-SU-2026:22125-1 1 CVE
Security update for editorconfig-core-c
This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: l_pattern buffer overflow (bsc#1262131).
first Jun 15, 2026 -
High max 8.6SUSE-SU-2026:22105-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 15, 2026 -
High max 7.8SUSE-SU-2026:22104-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 15, 2026 -
High max 8.2openSUSE-SU-2026:11042-1 1 CVE
python311-asyncssh-2.23.1-1.1 on GA media
These are all security issues fixed in the python311-asyncssh-2.23.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2419-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.7.0~git193.9ab79d496: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Cha…
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2418-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.2.10~git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Ch…
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2417-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.2.10~git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Ch…
first Jun 16, 2026 -
High max 7.8openSUSE-SU-2026:11045-1 1 CVE
traefik2-2.11.50-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.50-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2410-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2406-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-1544: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554). - CVE-2025-11234: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service (bsc#1250984). - C…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2405-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2404-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2403-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:2424-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:2423-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2412-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2411-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - C…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2409-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:22085-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
High max 7.6SUSE-SU-2026:22082-1 5 CVEs
Security update for erlang
This update for erlang fixes the following issues - CVE-2025-4748: improper limitation of a pathname may lead to path traversal (bsc#1244642). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc…
first Jun 5, 2026 -
High max 7.5SUSE-SU-2026:22081-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 5, 2026 -
High max 8.8SUSE-SU-2026:22077-1 11 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 4, 2026 -
High max 7.8openSUSE-SU-2026:11038-1 1 CVE
stgit-2.6.0-1.1 on GA media
These are all security issues fixed in the stgit-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 7.5openSUSE-SU-2026:11034-1 3 CVEs
perl-Crypt-PBKDF2-0.261630-1.1 on GA media
These are all security issues fixed in the perl-Crypt-PBKDF2-0.261630-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026