12,602 results · Clear filters · Feed
-
High max 8.8openSUSE-SU-2026:10015-1 2 CVEs
libwget4-2.2.1-1.1 on GA media
These are all security issues fixed in the libwget4-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 7, 2026 -
High max 8.8openSUSE-SU-2026:10016-1 1 CVE
chromedriver-143.0.7499.192-1.1 on GA media
These are all security issues fixed in the chromedriver-143.0.7499.192-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 8, 2026 -
High max 7.5openSUSE-SU-2026:10013-1 6 CVEs
apptainer-1.4.5-1.1 on GA media
These are all security issues fixed in the apptainer-1.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 7, 2026 -
High max 7.0openSUSE-SU-2026:10004-1 1 CVE
fluidsynth-2.5.2-1.1 on GA media
These are all security issues fixed in the fluidsynth-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 3, 2026 -
High max 7.8openSUSE-SU-2026:10001-1 1 CVE
dirmngr-2.5.16-1.1 on GA media
These are all security issues fixed in the dirmngr-2.5.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 1, 2026 -
High max 7.5openSUSE-SU-2026:10000-1 1 CVE
gnu-recutils-1.9-3.1 on GA media
These are all security issues fixed in the gnu-recutils-1.9-3.1 package on the GA media of openSUSE Tumbleweed.
first Jan 1, 2026 -
High max 7.0openSUSE-SU-2025:20175-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 11.8.5: * CVE-2025-13699: Fixed Directory Traversal Remote Code Execution Vulnerability (bsc#1254313) Other fixes: - Add %license tags to license files (bsc#1252162) - Add INSTALL_DOCREADMEDIR cm…
first Dec 22, 2025 -
High max 7.5openSUSE-SU-2025:20171-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the …
first Dec 18, 2025 -
High max 9.8openSUSE-SU-2025:20164-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
High max 7.5openSUSE-SU-2025:20162-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash (bsc#1252749). - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362). - C…
first Dec 15, 2025 -
High max 7.4openSUSE-SU-2025:20160-1 8 CVEs
Security update for hauler
This update for hauler fixes the following issues: - Update to version 1.3.1 (bsc#1251516, CVE-2025-47911, bsc#1251891, CVE-2025-11579, bsc#1251651, CVE-2025-58190, bsc#1248937, CVE-2025-58058): * bump github.com/containerd/containerd (#474) * another fix to …
first Dec 12, 2025 -
High max 8.2openSUSE-SU-2025:20159-1 2 CVEs
Security update for keylime
This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs (bsc#1254199). - CVE-2025-1057…
first Dec 12, 2025 -
High max 7.8openSUSE-SU-2025:20163-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-aft…
first Dec 15, 2025 -
High max 7.5openSUSE-SU-2025:20158-1 12 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.11. Security issues fixed: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU s…
first Dec 12, 2025 -
High max 7.5openSUSE-SU-2025:20157-1 13 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.5. Security issues fixed: - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host certificate validation (bsc#1254431). - CVE-2025-61727: crypto/x509: …
first Dec 12, 2025 -
High max 7.8openSUSE-SU-2025:20148-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: Changes in openexr: - CVE-2025-12495: Fixed a file parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [bsc#1253714] - CVE-2025-12839: Fixed a file parsing Heap-based Buffer Overflow Remot…
first Dec 9, 2025 -
High max 7.5openSUSE-SU-2025:20138-1 1 CVE
Security update for act
This update for act fixes the following issues: - CVE-2025-47913: Prevent panic in embedded golang.org/x/crypto/ssh/agent client when receiving unexpected message types for key listing or signing requests (boo#1253608)
first Dec 4, 2025 -
High max 7.5openSUSE-SU-2025:20133-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-64076: Fixed bug in decode_definite_long_string() that causes incorrect chunk length calculation (bsc#1253746). Already fixed in release 5.6.3: - CVE-2024-26134: Fixed potential crash when ha…
first Dec 2, 2025 -
High max 8.1openSUSE-SU-2025:20132-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).
first Dec 2, 2025 -
High max 7.5openSUSE-SU-2025:20125-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-53057: Fixed enhance certificate handling (bsc#1252414). Other bug …
first Nov 28, 2025 -
High max 7.5openSUSE-SU-2025:20123-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-61748: Fixed enhance string handling (bsc#1252418). - CVE-2025-53057:…
first Nov 28, 2025 -
High max 7.8openSUSE-SU-2025:20119-1 11 CVEs
Security update for tcpreplay
This update for tcpreplay fixes the following issues: - update to 4.5.2: * features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AF_XDP socket support - tcpreplay -w (write into a pcap file) - tcpreplay --fi…
first Nov 27, 2025 -
High max 7.5openSUSE-SU-2025:20116-1 1 CVE
Security update for rnp
This update for rnp fixes the following issues: - update to 0.18.1: * CVE-2025-13470: PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only (boo#1253957, CVE-2025-13402)
first Nov 27, 2025 -
High max 7.4openSUSE-SU-2025:20113-1 1 CVE
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled (bsc#1252839) - Changes - auth: Remove proxy_always field. - config: Change settings history …
first Nov 27, 2025 -
High max 7.3openSUSE-SU-2025:20099-1 3 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958). - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959). - CVE-2025-62231: Fixed value…
first Nov 27, 2025 -
High max 7.5openSUSE-SU-2025:20097-1 2 CVEs
Security update for helmfile
This update for helmfile fixes the following issues: Changes in helmfile: Update to version 1.1.9: * feat: update strategy for reinstall by @simbou2000 in #2019 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.7 to 1.89.0 by @dependabot[b…
first Dec 30, 2025 -
High max 7.5openSUSE-SU-2025:20090-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757) - CVE-2025-10148: Fixed predictable WebSocket mask…
first Nov 26, 2025 -
High max 7.5openSUSE-SU-2025:20089-1 1 CVE
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability (bsc#1241693) - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not c…
first Nov 26, 2025 -
High max 8.4openSUSE-SU-2025:20072-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3: * CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252232)
first Nov 20, 2025 -
High max 7.5openSUSE-SU-2025:20055-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: Fixed large dynamic memory allocations via a small document submitted for parsing (bsc#1249584)
first Nov 19, 2025 -
High max 8.8openSUSE-SU-2025:20049-1 7 CVEs
Security update for tiff
This update for tiff fixes the following issues: tiff was updated to 4.7.1: * Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove…
first Nov 19, 2025 -
High max 7.1openSUSE-SU-2025:20022-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485) - CVE-2025-59682: Fixed a potential partial directory-trav…
first Oct 31, 2025 -
High max 8.8openSUSE-SU-2025:20021-1 7 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.3.0 ESR: * Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded draft subject * Thunderbird could crash on startup * Thunderbird …
first Oct 29, 2025 -
High max 7.5openSUSE-SU-2025:15852-1 4 CVEs
trivy-0.68.2-1.1 on GA media
These are all security issues fixed in the trivy-0.68.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 29, 2025 -
High max 8.1openSUSE-SU-2025:15845-1 2 CVEs
podman-5.7.1-1.1 on GA media
These are all security issues fixed in the podman-5.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 24, 2025 -
High max 7.3openSUSE-SU-2025:15843-1 1 CVE
buildah-1.42.2-1.1 on GA media
These are all security issues fixed in the buildah-1.42.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 24, 2025 -
High max 7.5openSUSE-SU-2025:15838-1 3 CVEs
python311-tornado6-6.5.4-1.1 on GA media
These are all security issues fixed in the python311-tornado6-6.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 20, 2025 -
High max 8.2openSUSE-SU-2025:15837-1 3 CVEs
php8-8.4.16-1.1 on GA media
These are all security issues fixed in the php8-8.4.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 20, 2025 -
High max 7.5openSUSE-SU-2025:15835-1 1 CVE
duc-1.4.6-1.1 on GA media
These are all security issues fixed in the duc-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 20, 2025 -
High max 7.5openSUSE-SU-2025:15832-1 1 CVE
coredns-for-k8s1.35-1.13.1-2.1 on GA media
These are all security issues fixed in the coredns-for-k8s1.35-1.13.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 19, 2025