12,597 results · Clear filters · Feed
-
High max 8.7openSUSE-SU-2026:10417-1 1 CVE
python311-deepdiff-8.6.2-1.1 on GA media
These are all security issues fixed in the python311-deepdiff-8.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5openSUSE-SU-2026:10416-1 1 CVE
python313-PyMuPDF-1.27.2.2-1.1 on GA media
These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0976-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:0993-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Mar 24, 2026 -
High max 8.2openSUSE-SU-2026:10410-1 1 CVE
pnpm-10.32.1-1.1 on GA media
These are all security issues fixed in the pnpm-10.32.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
High max 7.8openSUSE-SU-2026:10412-1 1 CVE
python311-pydicom-3.0.2-1.1 on GA media
These are all security issues fixed in the python311-pydicom-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
High max 7.5openSUSE-SU-2026:10411-1 1 CVE
python311-dynaconf-3.2.13-1.1 on GA media
These are all security issues fixed in the python311-dynaconf-3.2.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
High max 8.1openSUSE-SU-2026:10409-1 1 CVE
pgvector-devel-0.8.2-1.1 on GA media
These are all security issues fixed in the pgvector-devel-0.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
High max 7.7SUSE-SU-2026:0969-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).
first Mar 23, 2026 -
High max 7.7SUSE-SU-2026:0968-1 1 CVE
Security update for freerdp2
This update for freerdp2 fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:0955-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). Changelo…
first Mar 23, 2026 -
High max 7.5openSUSE-SU-2026:10406-1 1 CVE
lemon-3.51.3-1.1 on GA media
These are all security issues fixed in the lemon-3.51.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
High max 7.5openSUSE-SU-2026:10401-1 1 CVE
freeciv-3.2.4-1.1 on GA media
These are all security issues fixed in the freeciv-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
High max 8.8openSUSE-SU-2026:10400-1 26 CVEs
chromedriver-146.0.7680.153-2.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.153-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
High max 7.9openSUSE-SU-2026:20368-1 1 CVE
Security update for ocaml
This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock() can lead to arbitrary code execution (bsc#1258992)
first Mar 17, 2026 -
High max 7.5openSUSE-SU-2026:20366-1 2 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-58181: Fixed unbounded memory consumption. (bsc#1253904) - CVE-2025-30204: Fixed a bug in jwt-go which allows excessive memory allocation during header parsing. (bsc#1240513)
first Mar 16, 2026 -
High max 7.3openSUSE-SU-2026:20361-1 1 CVE
Security update for osc, obs-scm-bridge
This update for osc, obs-scm-bridge fixes the following issues: Changes in osc: - 1.24.0 - Command-line: - Add '--target-owner' option to 'git-obs repo fork' command - Add '--self' parameter to fix 'no matching parent repo' error message in 'git-obs pr create…
first Mar 12, 2026 -
High max 8.6openSUSE-SU-2026:20354-1 11 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (bsc#1254876). - CVE-2025-32049: Denia…
first Mar 13, 2026 -
High max 7.5openSUSE-SU-2026:20351-1 1 CVE
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253611).
first Mar 12, 2026 -
High max 7.6openSUSE-SU-2026:20350-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). - …
first Mar 12, 2026 -
High max 7.5openSUSE-SU-2026:20342-1 5 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Changes in go1.26: go1.26.1 (released 2026-03-05) includes security fixes to the crypto/x509, html/template, net/url, and os packages, as well as bug fixes to the go command, the go fix command, the compiler,…
first Mar 11, 2026 -
High max 7.5openSUSE-SU-2026:20341-1 1 CVE
Security update for kea
This update for kea fixes the following issues: Update to release 3.0.1: - CVE-2025-40779: Fixed crash upon interaction between specific client options and subnet selection (bsc#1248801).
first Mar 11, 2026 -
High max 8.6openSUSE-SU-2026:20337-1 38 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: I…
first Mar 9, 2026 -
High max 7.2
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Changes to roundcubemail: Update to 1.6.13: This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: + Fix CSS injectio…
first Mar 5, 2026 -
High max 7.5openSUSE-SU-2026:20322-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-27932: unbounded PBKDF2 iteration count can lead to a denial of service (bsc#1259154)
first Mar 5, 2026 -
High max 8.4openSUSE-SU-2026:20305-1 8 CVEs
Security update for podman
This update for podman fixes the following issues: Changes in podman: - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988) - CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds r…
first Mar 3, 2026 -
High max 8.2openSUSE-SU-2026:20298-1 1 CVE
Security update for assertj-core
This update for assertj-core fixes the following issues: Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion (bsc#1257293).
first Mar 2, 2026 -
High max 7.5openSUSE-SU-2026:20295-1 2 CVEs
Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-53629: header can allocate memory arbitrarily in the server, potentially leading to its exhaustion (bsc#1246471). - CVE-2025-53628: HTTP header smuggling due to insecure trailers merge (bsc#12…
first Mar 2, 2026 -
High max 7.5openSUSE-SU-2026:20292-1 1 CVE
Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)
first Mar 1, 2026 -
High max 7.5openSUSE-SU-2026:20291-1 1 CVE
Security update for fluidsynth
This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file (bsc#1256435).
first Feb 27, 2026 -
High max 8.6openSUSE-SU-2026:20283-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598).
first Feb 27, 2026 -
High max 8.9openSUSE-SU-2026:20271-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…
first Feb 26, 2026 -
High max 8.8openSUSE-SU-2026:20266-1 6 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
High max 8.8openSUSE-SU-2026:20265-1 6 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
High max 7.2openSUSE-SU-2026:20260-1 2 CVEs
Security update for mosquitto
This update for mosquitto fixes the following issues: Changes in mosquitto: - update to 2.0.23 (boo#1258671) * Fix handling of disconnected sessions for `per_listener_settings true` * Check return values of openssl *_get_ex_data() and *_set_ex_data() to preve…
first Feb 23, 2026 -
High max 8.8openSUSE-SU-2026:20253-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: * Fixed: Security fix. MFSA 2026-10 (bsc#1258231): * CVE-2026-2447: Heap buffer overflow in libvpx.
first Feb 19, 2026 -
High max 7.5openSUSE-SU-2026:20236-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks (bsc#1256569). - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from …
first Feb 15, 2026 -
High max 8.8openSUSE-SU-2026:20235-1 4 CVEs
Security update for fontforge
This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013). - CVE-2025-15269: remote code execution via use-…
first Feb 14, 2026 -
High max 7.5openSUSE-SU-2026:20204-1 8 CVEs
Security update for python-aiohttp, python-Brotli
This update for python-aiohttp, python-Brotli fixes the following issues: Changes in python-aiohttp: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path componen…
first Feb 12, 2026 -
High max 7.3openSUSE-SU-2026:20198-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958). - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959). - CVE-2025-62231: Fixe…
first Feb 11, 2026