12,572 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:24233-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: Security issues fixed: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables i…
first Oct 12, 2026 -
High max 8.5SUSE-SU-2026:24230-1 12 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-…
first Oct 12, 2026 -
High max 7.0SUSE-SU-2026:24227-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
High max 8.9SUSE-SU-2026:24217-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24215-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 9, 2026 -
High max 8.7SUSE-SU-2026:24213-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass a…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24207-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). - …
first Oct 8, 2026 -
High max 7.8SUSE-SU-2026:24202-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch …
first Oct 8, 2026 -
High max 8.8SUSE-SU-2026:24211-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to versio…
first Oct 9, 2026 -
High max 7.4SUSE-SU-2026:24203-1 7 CVEs
Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: out-o…
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:24199-1 11 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Oct 8, 2026 -
High max 8.6SUSE-SU-2026:24196-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make…
first Oct 9, 2026 -
High max 7.8SUSE-SU-2026:24194-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
High max 7.5SUSE-SU-2026:4773-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4772-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4762-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). Changes for openssl-1_0_0: - Security fixes in August 2026 release (bsc#1274774)
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4760-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 20, 2026 -
High max 8.7SUSE-SU-2026:4754-1 26 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may b…
first Oct 20, 2026 -
High max 7.8openSUSE-SU-2026:22138-1 3 CVEs
Security update for hashcat
This update for hashcat fixes the following issues: Changes in hashcat: Update to snapshot v7.1.2-942-gef3508ed8: * Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2026-68766 [boo#1276254] * Feed plugins and attack-mode 8 * Probabili…
first Oct 19, 2026 -
High max 8.7openSUSE-SU-2026:22135-1 1 CVE
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: * CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame fragmentation in the gRPC transport (boo#1279216) * Done throu…
first Oct 19, 2026 -
High max 8.7openSUSE-SU-2026:22134-1 8 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.102.0, fixing four security issues (GHSA-39wj-f2f4-978v, GHSA-4mq3-hpgx-9cx8, GHSA-qcwj-mr2r-2cx7, GHSA-wjmr-j3rp-mh2g): * gh release/run/attestation download and repo read-fi…
first Oct 19, 2026 -
High max 7.5openSUSE-SU-2026:22131-1 2 CVEs
Security update for varnish
This update for varnish fixes the following issues: Changes in varnish: - update to 7.7.3 (bsc#1280114, CVE-2025-8671): * https://vinyl-cache.org/docs/7.7/whats-new/changes-7.7.html * https://vinyl-cache.org/security/VSV00017.html#vsv00017 - Update to release…
first Oct 19, 2026 -
High max 7.5openSUSE-RU-2026:22137-1 1 CVE
Recommended update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - CVE-2026-78669, bsc#1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes
first Oct 19, 2026 -
High max 7.5openSUSE-RU-2026:22132-1 4 CVEs
Recommended update for sequoia-sq
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: * tool: Release v1.5.0. * tool: Fix link to README. * tool: Set a version for the sqz dependency. * Enable optimizations…
first Oct 19, 2026 -
High max 8.8SUSE-SU-2026:4732-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and…
first Oct 19, 2026 -
High max 8.2SUSE-SU-2026:24188-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
High max 8.4SUSE-SU-2026:4744-1 11 CVEs
Security update for python3, python3-base, python3-doc
This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-…
first Oct 19, 2026 -
High max 8.4SUSE-SU-2026:4743-1 16 CVEs
Security update for python36
This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1274743). - CVE-2026-3219: pip doesn'…
first Oct 19, 2026 -
High max 8.6SUSE-SU-2026:4739-1 15 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of serv…
first Oct 19, 2026 -
High max 8.4SUSE-SU-2026:4738-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).
first Oct 19, 2026 -
High max 7.8openSUSE-SU-2026:22123-1 6 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473) - CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474) - CVE-2026-106063: plug-ins: Add bounds ch…
first Oct 16, 2026 -
High max 8.2openSUSE-SU-2026:22120-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issues: Changes in cups-filters: - No longer provide the serial backend with 0700 permissions so cupsd does no longer run it as root but as usual as user 'lp' to avoid CVE-2026-95511 "Root arbitrary file overwr…
first Oct 15, 2026 -
High max 7.5openSUSE-SU-2026:22117-1 1 CVE
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.6: * workflows: mirror release tags to lib/ module tags * fs/zfs: fall back to VFS when zfs stats are unavailable * storage/stdout: nil-check Cpu, Network, and Memory s…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22116-1 2 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.1: * bumped go version to v1.26.7 (backport #771) * https registry auth fix (backport #763) * adjust supporting artifact retrieval (backport #777) * reject --platform on dig…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22111-1 11 CVEs
Security update for pi-coding-agent
This update for pi-coding-agent fixes the following issues: Changes in pi-coding-agent: - Update to version 1.0.4 (1.0.3 was superseded the same day and never submitted): * BREAKING: provider azure-openai-responses renamed to azure, now also serving Azure Fou…
first Oct 9, 2026 -
High max 7.8openSUSE-SU-2026:22106-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
High max 8.2openSUSE-SU-2026:22102-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22101-1 1 CVE
Security update for perl-XS-Parse-Keyword
This update for perl-XS-Parse-Keyword fixes the following issue: - CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247).
first Oct 14, 2026 -
High max 7.7openSUSE-SU-2026:22100-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22089-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: Security issues fixed: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables i…
first Oct 12, 2026