12,572 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2026:12229-1 4 CVEs
libntpc1-1.2.6-1.1 on GA media
These are all security issues fixed in the libntpc1-1.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
High max 8.8openSUSE-SU-2026:12227-1 1 CVE
kubevirt1.8-container-disk-1.8.4-6.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-6.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
High max 7.5SUSE-SU-2026:24266-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: -…
first Oct 21, 2026 -
High max 8.7SUSE-SU-2026:24265-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protoco…
first Oct 20, 2026 -
High max 8.2SUSE-SU-2026:24263-1 1 CVE
Security update for guava
This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes f…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:24261-1 1 CVE
Security update for aliyun-cli
This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli…
first Oct 19, 2026 -
High max 7.8SUSE-SU-2026:24256-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
High max 8.8SUSE-SU-2026:4868-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: - CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). - CVE-2026-65335: webkitgtk: Processing maliciously cr…
first Oct 22, 2026 -
High max 7.5openSUSE-SU-2026:22142-1 1 CVE
Security update for yt-dlp
This update for yt-dlp fixes the following issues: Changes in yt-dlp: Update to version 2026.08.19: * utils: float_or_none: Catch OverflowError * americastestkitchen: Fix season/series extraction * apple: Rework extractors * ard: Remove dead extractor * bandc…
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:22140-1 1 CVE
Security update for aliyun-cli
This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli…
first Oct 19, 2026 -
High max 7.5openSUSE-SU-2026:12222-1 2 CVEs
libspice-server-devel-0.16.0-3.1 on GA media
These are all security issues fixed in the libspice-server-devel-0.16.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.1openSUSE-SU-2026:12221-1 1 CVE
roundcubemail-1.6.20-1.1 on GA media
These are all security issues fixed in the roundcubemail-1.6.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:12208-1 2 CVEs
amazon-cloudwatch-agent-1.300073.0-3.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 8.2openSUSE-SU-2026:12216-1 3 CVEs
owntone-29.3-1.1 on GA media
These are all security issues fixed in the owntone-29.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:12209-1 1 CVE
coredns-1.15.0-1.1 on GA media
These are all security issues fixed in the coredns-1.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5SUSE-SU-2026:4836-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
first Oct 21, 2026 -
High max 8.5SUSE-SU-2026:4835-1 12 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-…
first Oct 21, 2026 -
High max 8.8SUSE-SU-2026:4804-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to versio…
-
High max 8.2SUSE-SU-2026:4803-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).
-
High max 7.5SUSE-SU-2026:4802-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
High max 7.5SUSE-SU-2026:4805-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKey…
-
High max 7.5SUSE-SU-2026:4798-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
-
High max 7.5SUSE-SU-2026:4795-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
High max 7.8SUSE-SU-2026:4819-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
-
High max 7.5SUSE-SU-2026:4817-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
High max 7.5openSUSE-SU-2026:12206-1 2 CVEs
trivy-0.76.0-1.1 on GA media
These are all security issues fixed in the trivy-0.76.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:24222-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 9, 2026 -
High max 8.7SUSE-SU-2026:24220-1 9 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: Potential DoS and memory leak via TLS session use-a…
first Oct 9, 2026 -
High max 7.5openSUSE-SU-2026:12202-1 4 CVEs
perl-Dancer2-2.2.2-1.1 on GA media
These are all security issues fixed in the perl-Dancer2-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 8.4openSUSE-SU-2026:12198-1 1 CVE
libcdio++2-2.4.0-1.1 on GA media
These are all security issues fixed in the libcdio++2-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.6openSUSE-SU-2026:12197-1 5 CVEs
aom-tools-3.15.2-1.1 on GA media
These are all security issues fixed in the aom-tools-3.15.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12196-1 1 CVE
helm3-3.22.1-1.1 on GA media
These are all security issues fixed in the helm3-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12195-1 1 CVE
hauler-2.1.2-1.1 on GA media
These are all security issues fixed in the hauler-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12193-1 1 CVE
distribution-registry-3.1.2-2.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12191-1 2 CVEs
apache-arrow-26.0.0-1.1 on GA media
These are all security issues fixed in the apache-arrow-26.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 8.6SUSE-SU-2026:24251-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24247-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-81870: OpenTelem…
first Oct 8, 2026 -
High max 8.2SUSE-SU-2026:24245-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
High max 7.5SUSE-SU-2026:24244-1 1 CVE
Security update for perl-XS-Parse-Keyword
This update for perl-XS-Parse-Keyword fixes the following issue: - CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247).
first Oct 14, 2026 -
High max 7.7SUSE-SU-2026:24243-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 14, 2026