12,597 results · Clear filters · Feed
-
High max 8.8openSUSE-SU-2026:10489-1 2 CVEs
libinput-devel-1.31.1-1.1 on GA media
These are all security issues fixed in the libinput-devel-1.31.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
High max 8.2openSUSE-SU-2026:10488-1 1 CVE
corosync-3.1.10-4.1 on GA media
These are all security issues fixed in the corosync-3.1.10-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
High max 8.8openSUSE-SU-2026:20447-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Update to versio 16.13. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 30, 2026 -
High max 8.9openSUSE-SU-2026:20438-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: g…
first Mar 27, 2026 -
High max 8.4openSUSE-SU-2026:20433-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write (bsc#1259177).
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:20431-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issue: Update to PyJWT 2.12.1: - CVE-2026-32597: PyJWT accepts unknown `crit` header extensions (bsc#1259616). Changelog: Update to 2.12.1: - Add missing typing_extensions dependency for Python < 3.11 in #1150 …
first Mar 25, 2026 -
High max 7.5openSUSE-SU-2026:20452-1 2 CVEs
Security update for kea
This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert (bsc#1252863). - CVE-2026-3608: stack overflow via maliciously crafted message (bsc#1260380). Changelog: * A large number of bracket pairs in a …
first Apr 1, 2026 -
High max 7.5openSUSE-SU-2026:20456-1 1 CVE
Security update for tinyproxy
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - CVE-2026-3945: Fixed denial of service by unauthenticated remote attacker (boo#1261024) - Update to release 1.11.3 * conf: add BasicAuthRealm feature * basic auth: fix error status …
first Apr 1, 2026 -
High max 7.8SUSE-SU-2026:1169-1 18 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update Wireshark to version 4.6.4 (jsc#PED-15400). - CVE-2024-9780: ITS dissector crash (bsc#1231475). - CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476). - CVE-2024-11595: Loop wi…
first Apr 2, 2026 -
High max 8.7SUSE-SU-2026:1171-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled value…
first Apr 2, 2026 -
High max 8.8openSUSE-FU-2026:20453-1 4 CVEs
Feature update for himmelblau
This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 (jsc#PED-14511): Security issues: - CVE-2025-54882: world readable cloud TGT token (bsc#1247735). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249013). - CV…
first Apr 1, 2026 -
High max 7.5SUSE-SU-2026:1170-1 1 CVE
Security update for perl-Crypt-URandom
This update for perl-Crypt-URandom fixes the following issue: Update to 0.550.0 (0.55): - CVE-2026-2474: heap buffer overflow in the XS function `crypt_urandom_getrandom()` (bsc#1258266). Changelog: - Fix for sysread/read failures. Thanks to Miha Purg for GH#…
first Apr 2, 2026 -
High max 7.0SUSE-SU-2026:20905-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Changes in busybox: - CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. (bsc#1258163) - CVE-2026-26158: Fixed arbitrary file modification and privi…
first Mar 18, 2026 -
High max 8.2SUSE-SU-2026:20907-1 2 CVEs
Security update for protobuf
This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…
first Mar 18, 2026 -
High max 8.8SUSE-SU-2026:20906-1 4 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - Update to version 17.9. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 18, 2026 -
High max 8.7SUSE-SU-2026:20903-1 2 CVEs
Security update for libjxl
This update for libjxl fixes the following issues: Update to libjxl 0.11.2: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory (bsc#1258090). - CVE-2026-1837: a specially crafted file can ca…
first Mar 18, 2026 -
High max 8.9SUSE-SU-2026:20949-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: g…
first Mar 27, 2026 -
High max 7.5SUSE-SU-2026:20943-1 2 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb…
first Mar 25, 2026 -
High max 7.2SUSE-SU-2026:20941-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …
first Mar 19, 2026 -
High max 8.4SUSE-SU-2026:20936-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write (bsc#1259177).
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:20934-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issue: Update to PyJWT 2.12.1: - CVE-2026-32597: PyJWT accepts unknown `crit` header extensions (bsc#1259616). Changelog: Update to 2.12.1: - Add missing typing_extensions dependency for Python < 3.11 in #1150 …
first Mar 25, 2026 -
High max 7.2SUSE-SU-2026:20930-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Mar 25, 2026 -
High max 8.7SUSE-SU-2026:20928-1 2 CVEs
Security update for python-black
This update for python-black fixes the following issues: - CVE-2026-31900: a malicious pyproject.toml edit can lead to arbitrary code execution (bsc#1259546). - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).
first Mar 24, 2026 -
High max 7.2SUSE-SU-2026:20927-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue: Update to 389-ds 3.0.6~git249.6688af9b2: - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE (bsc#1258727). Changelog: * Issue 7277 - …
first Mar 24, 2026 -
High max 7.6SUSE-SU-2026:20926-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.18: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:20925-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 24, 2026 -
High max 8.8SUSE-SU-2026:20921-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - Update to version 18.3. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 20, 2026 -
High max 7.5SUSE-SU-2026:20920-1 1 CVE
Security update for python-orjson
This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump (bsc#1257121).
first Mar 20, 2026 -
High max 8.7SUSE-SU-2026:20919-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 20, 2026 -
High max 7.5SUSE-SU-2026:20918-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 20, 2026 -
High max 8.1SUSE-SU-2026:20917-1 18 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…
first Mar 20, 2026 -
High max 7.8SUSE-SU-2026:20915-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20929-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 25, 2026 -
High max 8.2SUSE-SU-2026:20902-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…
first Mar 18, 2026 -
High max 7.0openSUSE-SU-2026:10481-1 4 CVEs
python314-3.14.3-4.1 on GA media
These are all security issues fixed in the python314-3.14.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10480-1 4 CVEs
python313-3.13.12-3.1 on GA media
These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10478-1 4 CVEs
python311-3.11.15-4.1 on GA media
These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10477-1 4 CVEs
python310-3.10.20-3.1 on GA media
These are all security issues fixed in the python310-3.10.20-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 8.4openSUSE-SU-2026:10472-1 1 CVE
conftest-0.67.1-2.1 on GA media
These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10479-1 4 CVEs
python312-3.12.13-4.1 on GA media
These are all security issues fixed in the python312-3.12.13-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026