12,597 results · Clear filters · Feed
-
High max 8.7openSUSE-SU-2026:20385-1 2 CVEs
Security update for libjxl
This update for libjxl fixes the following issues: Update to libjxl 0.11.2: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory (bsc#1258090). - CVE-2026-1837: a specially crafted file can ca…
first Mar 18, 2026 -
High max 8.3openSUSE-SU-2026:20378-1 3 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020) - CVE-2025-28162: Fixed a memory leaks when running `pngimage`. (bsc#1257364) - CVE-2025-28164: Fixed a …
first Mar 17, 2026 -
High max 7.5SUSE-SU-2026:20821-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:20820-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 24, 2026 -
High max 8.2openSUSE-SU-2026:10423-1 6 CVEs
nginx-1.29.7-1.1 on GA media
These are all security issues fixed in the nginx-1.29.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 8.1SUSE-SU-2026:1037-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: - Security issues fixed: - CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled (bsc#1258136) - CVE-2026-21721: Fixed access control by the dashboard permissions …
first Mar 25, 2026 -
High max 7.5openSUSE-SU-2026:10421-1 1 CVE
kea-3.0.3-1.1 on GA media
These are all security issues fixed in the kea-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.5openSUSE-SU-2026:10425-1 1 CVE
python311-cbor2-5.9.0-1.1 on GA media
These are all security issues fixed in the python311-cbor2-5.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 8.7SUSE-RU-2026:1001-1 1 CVE
Recommended update for rust1.94
This update for rust1.94 fixes the following issues: This update adds rust1.94. Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.0 - CVE-2026-31812: avoid unwrapping varint decoding during parameters parsing (bsc#1259…
first Mar 25, 2026 -
High max 8.2openSUSE-SU-2026:10427-1 1 CVE
jupyter-matplotlib-0.11.7-17.1 on GA media
These are all security issues fixed in the jupyter-matplotlib-0.11.7-17.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1029-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1030-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
High max 8.8openSUSE-SU-2026:10426-1 1 CVE
python311-intake-2.0.9-1.1 on GA media
These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1010-1 1 CVE
Security update 5.0.7 for Multi-Linux Manager Server
This update fixes the following issues: branch-network-formula: - Update to version 1.1.0 * Enable containers on SLE15SP7 * Exclude podman interfaces from sysctl setting cobbler: - Compatibility fixes for tftpboot directory setup inter-server-sync: - Version …
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1027-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1012-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed …
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1026-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fixed …
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1014-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed …
first Mar 25, 2026 -
High max 8.9openSUSE-SU-2026:10431-1 1 CVE
python311-oci-sdk-2.168.3-1.1 on GA media
These are all security issues fixed in the python311-oci-sdk-2.168.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1028-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1003-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2…
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20766-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Mar 19, 2026 -
High max 8.7SUSE-SU-2026:20770-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 23, 2026 -
High max 8.7SUSE-SU-2026:20761-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 20, 2026 -
High max 8.7SUSE-SU-2026:20797-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:20795-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20794-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to version 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20771-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to sqlite3 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:20760-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 20, 2026 -
High max 7.2SUSE-SU-2026:20758-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …
first Mar 19, 2026 -
High max 8.2SUSE-SU-2026:20753-1 2 CVEs
Security update for protobuf
This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…
first Mar 18, 2026 -
High max 8.2SUSE-SU-2026:20752-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…
first Mar 18, 2026 -
High max 8.3SUSE-SU-2026:20750-1 3 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020) - CVE-2025-28162: Fixed a memory leaks when running `pngimage`. (bsc#1257364) - CVE-2025-28164: Fixed a …
first Mar 17, 2026 -
High max 7.8SUSE-SU-2026:0998-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0978-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472). Other bug fixes: -Fix rpm scripts to not break swanctl.conf use (bsc#1256442): * Guard rpm migration scripts migrating s…
first Mar 23, 2026 -
High max 7.5openSUSE-SU-2026:10414-1 1 CVE
perl-Crypt-URandom-0.550.0-1.1 on GA media
These are all security issues fixed in the perl-Crypt-URandom-0.550.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0979-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026 -
High max 7.8SUSE-SU-2026:0984-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2…
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:0981-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:0980-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026