12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2025:15054-1 3 CVEs
rclone-1.69.2-1.1 on GA media
These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed.
first May 5, 2025 -
High max 7.4openSUSE-SU-2025:15053-1 3 CVEs
java-1_8_0-openjdk-1.8.0.452-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.452-1.1 package on the GA media of openSUSE Tumbleweed.
first May 5, 2025 -
High max 7.5openSUSE-SU-2025:15052-1 5 CVEs
grafana-11.5.4-1.1 on GA media
These are all security issues fixed in the grafana-11.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first May 5, 2025 -
High max 8.9SUSE-SU-2026:20364-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
first Jan 21, 2026 -
High max 8.6SUSE-SU-2026:20245-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399).
first Jan 16, 2026 -
High max 7.5SUSE-SU-2026:20244-1 6 CVEs
Security update for elemental-toolkit, elemental-operator
This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to version 1.6.10: * Remove 'latest' tag as this overlaps with the latest branch * Bump github.com/rancher-sandbox/go-tpm and its dependencies This …
first Jan 15, 2026 -
High max 7.8SUSE-SU-2026:20243-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
High max 8.6SUSE-SU-2026:20238-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP r…
first Feb 6, 2026 -
High max 8.0SUSE-SU-2026:20231-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783). - CVE-2025-58436: slow client communication leads to a possible…
first Feb 4, 2026 -
High max 8.0SUSE-SU-2026:20229-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783). - CVE-2025-58436: slow client communication leads to a possible…
first Feb 4, 2026 -
High max 8.8SUSE-SU-2026:20223-1 12 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).…
first Feb 2, 2026 -
High max 7.8SUSE-SU-2026:20222-1 8 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.4.13: - CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933). - CVE-2025-13499: Kafka dissector crash (bsc#1254108). - CVE-2025-13945: HTTP3 dissector crash (bsc#1254471). - CV…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:20215-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.2+10 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 30, 2026 -
High max 8.6SUSE-SU-2026:20212-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library (bsc#1250562). - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code …
first Jan 30, 2026 -
High max 7.1SUSE-SU-2026:20217-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 2, 2026 -
High max 8.4SUSE-SU-2026:20214-1 4 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion (bsc#1255333): - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/op…
first Jan 30, 2026 -
High max 8.5SUSE-SU-2026:20213-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502).
first Jan 30, 2026 -
High max 8.8SUSE-SU-2026:20211-1 12 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).…
first Feb 2, 2026 -
High max 8.5SUSE-SU-2026:20206-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502).
first Jan 30, 2026 -
High max 8.6SUSE-SU-2026:20205-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library (bsc#1250562). - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code …
first Jan 30, 2026 -
High max 7.5SUSE-SU-2026:20199-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Jan 29, 2026 -
High max 8.4SUSE-SU-2026:20198-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…
first Jan 29, 2026 -
High max 8.4SUSE-SU-2026:20195-1 2 CVEs
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to …
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:20190-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.10+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 28, 2026 -
High max 8.9SUSE-SU-2026:20189-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: Fixed excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867) - CVE-2025-66418: Fixed resource exhaustion via unbounded number of li…
first Jan 28, 2026 -
High max 8.6SUSE-SU-2026:20188-1 1 CVE
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues: - CVE-2026-24486: Fixed non-default configuration options can lead to path traversal (bsc#1257301).
first Jan 28, 2026 -
High max 7.5SUSE-SU-2026:20183-1 5 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: Fixed use-after-free/double-free in ImageMagick (bsc#1254435) - CVE-2025-66628: Fixed Integer Overflow leading to out of bounds read in ImageMagick (32-bit only) (bsc#1254820) - CVE-202…
first Jan 28, 2026 -
High max 8.4SUSE-SU-2026:20179-1 2 CVEs
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to …
first Jan 29, 2026 -
High max 8.4SUSE-SU-2026:20178-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:20176-1 6 CVEs
Security update for elemental-register, elemental-toolkit
This update for elemental-register, elemental-toolkit fixes the following issues: elemental-register was updated to 1.8.1: Changes on top of v1.8.1: * Update headers to 2026 * Update questions to include SL Micro 6.2 Update to v1.8.1: * Install yip config fil…
first Jan 29, 2026 -
High max 8.9SUSE-SU-2026:20175-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: Fixed excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867) - CVE-2025-66418: Fixed resource exhaustion via unbounded number of li…
first Jan 28, 2026 -
High max 7.5SUSE-SU-2026:20158-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed Denial-of-Service issue that may lead to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets (bsc#1256902)
first Jan 22, 2026 -
High max 8.9SUSE-SU-2026:20157-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20156-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114). - CVE-2025-6199: uninitialized mem…
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20154-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: - Update to 3.13.11: - Security - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount…
first Jan 22, 2026 -
High max 8.2SUSE-SU-2026:20146-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Version update to 8.4.16: Security fixes: - CVE-2025-14177: getimagesize() function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode (bsc#1255710). - CVE-2025-14…
first Jan 26, 2026 -
High max 8.6SUSE-SU-2026:20139-1 1 CVE
Security update for python-jaraco.context
This update for python-jaraco.context fixes the following issues: - CVE-2026-23949: Fixed malicious tar archives may lead to path traversal (bsc#1256954).
first Jan 23, 2026 -
High max 7.5SUSE-SU-2026:20135-1 1 CVE
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.18: - CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records (bsc#1256997) Feature Changes: * Add more information to the rndc recursing output about fetches. * Reduce t…
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20133-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed Denial-of-Service issue that may lead to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets (bsc#1256902)
first Jan 22, 2026 -
High max 8.9SUSE-SU-2026:20131-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
first Jan 22, 2026