12,572 results · Clear filters · Feed
-
High max 8.5openSUSE-SU-2026:22085-1 12 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-…
first Oct 12, 2026 -
High max 7.0openSUSE-SU-2026:22083-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
High max 7.5openSUSE-SU-2026:22078-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 9, 2026 -
High max 8.7openSUSE-SU-2026:22072-1 9 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: Potential DoS and memory leak via TLS session use-a…
first Oct 9, 2026 -
High max 8.9openSUSE-SU-2026:22071-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 9, 2026 -
High max 8.6openSUSE-SU-2026:22069-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make…
first Oct 9, 2026 -
High max 7.5openSUSE-SU-2026:22067-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 9, 2026 -
High max 8.8openSUSE-SU-2026:22065-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to versio…
first Oct 9, 2026 -
High max 8.7openSUSE-SU-2026:22064-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass a…
first Oct 9, 2026 -
High max 7.4openSUSE-SU-2026:22054-1 7 CVEs
Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: out-o…
first Oct 8, 2026 -
High max 7.5openSUSE-SU-2026:22045-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
first Oct 7, 2026 -
High max 7.5openSUSE-SU-2026:22059-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). - …
first Oct 8, 2026 -
High max 7.5openSUSE-SU-2026:22057-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-81870: OpenTelem…
first Oct 8, 2026 -
High max 7.8openSUSE-SU-2026:22051-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch …
first Oct 8, 2026 -
High max 7.5openSUSE-SU-2026:22050-1 11 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Oct 8, 2026 -
High max 7.5openSUSE-SU-2026:22049-1 14 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 7, 2026 -
High max 8.8openSUSE-SU-2026:22047-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Man…
first Oct 7, 2026 -
High max 8.2SUSE-SU-2026:4619-1 29 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
-
High max 8.7openSUSE-SU-2026:12186-1 4 CVEs
rqlite-10.6.1-1.1 on GA media
These are all security issues fixed in the rqlite-10.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 7.3openSUSE-SU-2026:12176-1 2 CVEs
dr_libs-devel-20260901-1.1 on GA media
These are all security issues fixed in the dr_libs-devel-20260901-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8openSUSE-SU-2026:12175-1 1 CVE
ansible-core-2.20-2.20.10-2.1 on GA media
These are all security issues fixed in the ansible-core-2.20-2.20.10-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 7.1openSUSE-SU-2026:12184-1 16 CVEs
python313-OpenEXR-3.4.16-1.1 on GA media
These are all security issues fixed in the python313-OpenEXR-3.4.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 7.5openSUSE-SU-2026:12178-1 1 CVE
forgejo-17.0.0-1.1 on GA media
These are all security issues fixed in the forgejo-17.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8
dssim-3.5.1-1.1 on GA media
These are all security issues fixed in the dssim-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8openSUSE-SU-2026:12174-1 1 CVE
ansible-core-2.19-2.19.14-2.1 on GA media
These are all security issues fixed in the ansible-core-2.19-2.19.14-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8openSUSE-SU-2026:12173-1 1 CVE
ansible-core-2.18-2.18.19-3.1 on GA media
These are all security issues fixed in the ansible-core-2.18-2.18.19-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8openSUSE-SU-2026:12172-1 1 CVE
ansible-core-2.21.5-2.1 on GA media
These are all security issues fixed in the ansible-core-2.21.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
High max 8.8openSUSE-SU-2026:12169-1 16 CVEs
roundcubemail-1.6.19-1.1 on GA media
These are all security issues fixed in the roundcubemail-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 8.1openSUSE-SU-2026:12165-1 25 CVEs
kernel-devel-7.2.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 8.2openSUSE-SU-2026:12164-1 6 CVEs
hugo-0.168.0-2.1 on GA media
These are all security issues fixed in the hugo-0.168.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 8.7openSUSE-SU-2026:12163-1 7 CVEs
gh-2.102.0-1.1 on GA media
These are all security issues fixed in the gh-2.102.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 7.8openSUSE-SU-2026:12162-1 3 CVEs
crun-1.30.1-1.1 on GA media
These are all security issues fixed in the crun-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 7.5openSUSE-SU-2026:12161-1 1 CVE
aws-nitro-enclaves-binaryblobs-upstream-1.5.2~git0.1c496ed-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.2~git0.1c496ed-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2026 -
High max 7.8openSUSE-SU-2026:12160-1 1 CVE
python313-xhtml2pdf-0.2.24-1.1 on GA media
These are all security issues fixed in the python313-xhtml2pdf-0.2.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 7.5openSUSE-SU-2026:12159-1 1 CVE
python313-markdown2-2.5.5-2.1 on GA media
These are all security issues fixed in the python313-markdown2-2.5.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 7.6openSUSE-SU-2026:12158-1 1 CVE
libpcre2-16-0-10.49-2.1 on GA media
These are all security issues fixed in the libpcre2-16-0-10.49-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 7.5openSUSE-SU-2026:12152-1 3 CVEs
google-osconfig-agent-20261015.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20261015.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 8.8openSUSE-SU-2026:12151-1 14 CVEs
dpdk-25.11.4-1.1 on GA media
These are all security issues fixed in the dpdk-25.11.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026 -
High max 8.6SUSE-SU-2026:4690-1 14 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy sw…
first Oct 16, 2026 -
High max 7.5openSUSE-SU-2026:12154-1 2 CVEs
libXi-devel-1.8.3-3.1 on GA media
These are all security issues fixed in the libXi-devel-1.8.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 16, 2026