12,572 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:24374-1 3 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). - CVE-2026-78669: golang.org/x/net/http2: excessive C…
first Oct 26, 2026 -
High max 7.8SUSE-SU-2026:24372-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 23, 2026 -
High max 7.0SUSE-SU-2026:24367-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issues: Security issue fixed: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fi…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:24365-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 20, 2026 -
High max 7.1SUSE-SU-2026:24362-1 1 CVE
Security update for cpupower
This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: - intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663)…
first Oct 22, 2026 -
High max 8.2SUSE-SU-2026:24323-1 34 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
first Oct 17, 2026 -
High max 7.5SUSE-SU-2026:24320-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Oct 14, 2026 -
High max 8.4SUSE-SU-2026:24282-1 20 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…
first Oct 19, 2026 -
High max 7.1SUSE-SU-2026:24278-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).
first Oct 19, 2026 -
High max 7.5SUSE-SU-2026:24277-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 19, 2026 -
High max 7.5SUSE-SU-2026:24275-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Oct 19, 2026 -
High max 8.2SUSE-SU-2026:24273-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
first Oct 19, 2026 -
High max 7.7SUSE-SU-2026:4913-1 2 CVEs
Security update for gcc7
This update for gcc7 fixes the following issues: - CVE-2026-95619: libstdc++ integer overflow in `new` operator (bsc#1282500). - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority qu…
-
High max 7.7SUSE-SU-2026:4907-1 7 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argumen…
-
High max 8.4SUSE-SU-2026:4904-1 1 CVE
Security update for python, python-base, python-doc
This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).
-
High max 8.4openSUSE-SU-2026:12266-1 9 CVEs
libvips-devel-8.18.7-1.1 on GA media
These are all security issues fixed in the libvips-devel-8.18.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 24, 2026 -
High max 8.3openSUSE-SU-2026:12265-1 1 CVE
python313-wyoming-1.10.2-1.1 on GA media
These are all security issues fixed in the python313-wyoming-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 24, 2026 -
High max 7.8openSUSE-SU-2026:12263-1 20 CVEs
nvidia-open-driver-G06-signed-check-580.196.07-1.1 on GA media
These are all security issues fixed in the nvidia-open-driver-G06-signed-check-580.196.07-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 24, 2026 -
High max 7.5openSUSE-SU-2026:12260-1 5 CVEs
buildpacks-cli-0.40.10-1.1 on GA media
These are all security issues fixed in the buildpacks-cli-0.40.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 24, 2026 -
High max 7.1openSUSE-SU-2026:22155-1 1 CVE
Security update for cpupower
This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: - intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663)…
first Oct 22, 2026 -
High max 7.5openSUSE-SU-2026:12258-1 3 CVEs
zk-0.15.7-1.1 on GA media
These are all security issues fixed in the zk-0.15.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:12257-1 5 CVEs
libunbound8-1.26.2-1.1 on GA media
These are all security issues fixed in the libunbound8-1.26.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 8.7openSUSE-SU-2026:12253-1 2 CVEs
tekton-cli-0.46.2-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.46.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:12246-1 1 CVE
mihomo-1.19.33-1.1 on GA media
These are all security issues fixed in the mihomo-1.19.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:12243-1 1 CVE
libsndfile-devel-1.2.2-7.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-7.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:12242-1 3 CVEs
kubevirt1.9-container-disk-1.9.1-2.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:12240-1 1 CVE
google-guest-agent-20261015.00-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20261015.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 8.7openSUSE-SU-2026:12235-1 5 CVEs
containerized-data-importer1.65-api-1.65.0-4.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 8.3openSUSE-SU-2026:12251-1 6 CVEs
python313-Pillow-13.0.0-2.1 on GA media
These are all security issues fixed in the python313-Pillow-13.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 8.7openSUSE-SU-2026:12241-1 8 CVEs
kubevirt1.8-container-disk-1.8.4-7.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-7.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 8.1openSUSE-SU-2026:12231-1 4 CVEs
bind-9.20.30-1.1 on GA media
These are all security issues fixed in the bind-9.20.30-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4897-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4895-1 5 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads (bsc#1277618). - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and…
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4893-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). - CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#12849…
first Oct 23, 2026 -
High max 7.5SUSE-SU-2026:4891-1 2 CVEs
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272130). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated…
first Oct 23, 2026 -
High max 7.1SUSE-SU-2026:4890-1 1 CVE
Security update for cpupower
This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: - Release to latest kernel-source including: * intel-speed-select: Harden daemon pidfile …
first Oct 23, 2026 -
High max 7.0openSUSE-SU-2026:22163-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issue: - CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338).
first Oct 23, 2026 -
High max 7.5openSUSE-SU-2026:22146-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: -…
first Oct 21, 2026 -
High max 8.7openSUSE-SU-2026:22145-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protoco…
first Oct 20, 2026 -
High max 8.2openSUSE-SU-2026:22143-1 1 CVE
Security update for guava
This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes f…
first Oct 20, 2026