898 results · Clear filters · Feed
-
Low max 3.7SUSE-SU-2026:0458-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 11, 2026 -
Low max 2.9SUSE-SU-2026:0444-1 1 CVE
Security update for uriparser
This update for uriparser fixes the following issues: - CVE-2025-67899: large input containing many commas can cause unbounded recursion and stack consumption (bsc#1255000).
first Feb 11, 2026 -
Low max 3.7SUSE-SU-2026:0336-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).
first Jan 29, 2026 -
Low max 3.7SUSE-SU-2026:0334-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805)
first Jan 29, 2026 -
Low max 3.7SUSE-SU-2026:0286-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
first Jan 23, 2026 -
Low max 1.8SUSE-SU-2026:0231-1 1 CVE
Security update for exiv2-0_26
This update for exiv2-0_26 fixes the following issues: Add reference for previously fixed issue: - CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of `JpegBase::readMetadata` (bsc#1248963).
first Jan 22, 2026 -
Low max 1.9SUSE-SU-2026:0062-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 8, 2026 -
Low max 1.9SUSE-SU-2026:0053-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 7, 2026 -
Low max 1.9SUSE-SU-2026:0036-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 6, 2026 -
Low max 2.9SUSE-SU-2025:4501-1 1 CVE
Security update for taglib
This update for taglib fixes the following issues: - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations (bsc#1243499).
first Dec 19, 2025 -
Low max 3.6SUSE-SU-2025:4112-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyComman…
first Nov 15, 2025 -
Low max 3.6SUSE-SU-2025:4098-1 2 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCom…
first Nov 14, 2025 -
Low max 1.8SUSE-SU-2026:0337-1 1 CVE
Security update for python
This update for python fixes the following issues: - Modified CVE-2025-6075 fix to not use `re.ASCII` flag (not available in Python 2.7) (bsc#1257064).
first Jan 29, 2026 -
Low max 3.7SUSE-SU-2026:0266-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
first Jan 23, 2026 -
Low max 2.1SUSE-SU-2026:0081-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Jan 9, 2026 -
Low max 2.1SUSE-SU-2025:4439-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Dec 17, 2025 -
Low max 2.1SUSE-SU-2025:4434-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Dec 17, 2025 -
Low max 3.7SUSE-SU-2025:4347-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)
first Dec 10, 2025 -
Low max 3.6SUSE-SU-2025:4097-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
first Nov 14, 2025 -
Low max 3.6SUSE-SU-2025:4067-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyComman…
first Nov 12, 2025 -
Low max 2.7SUSE-SU-2025:3986-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: fixed a verification denial of service due to a malicious subkey in the keyring (bsc#1239119)
first Nov 7, 2025 -
Low max 3.7SUSE-SU-2025:21201-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed Buffer Under-read in gfileutils.c (bsc#1249055)
first Dec 9, 2025 -
Low max 3.6SUSE-SU-2025:21161-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…
first Nov 28, 2025 -
Low max 3.6SUSE-SU-2025:21128-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…
first Nov 28, 2025 -
Low max 3.7SUSE-SU-2025:21063-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed Buffer Under-read in gfileutils.c (bsc#1249055)
first Nov 21, 2025 -
Low max 3.7SUSE-SU-2025:20429-1 1 CVE
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.8.2: * cargo: Afterburn release 5.8.2 * docs/release-notes: update for release 5.8.2 * cargo: update dependencies * cargo: Afterburn release 5.8.1 * cargo: Afterburn release 5.8.0 * doc…
first Jun 20, 2025 -
Low max 3.6SUSE-SU-2025:20353-1 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to runc v1.2.6. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.6>. Update to runc v1.2.0~rc3. Upstream changelog is available from <https://github.com/open…
first May 21, 2025 -
Low max 3.6SUSE-SU-2025:20046-1 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to runc v1.1.14. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.14>. - CVE-2024-45310: Fixed that runc can be tricked into creating empty files/directories…
first Feb 3, 2025 -
Low max 3.6SUSE-SU-2025:1522-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2024-4853: Fixed denial of service in editcap caused by crafted capture file (bsc#1224259)
first May 9, 2025 -
Low max 2.9SUSE-SU-2025:1489-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659)
first May 6, 2025 -
Low max 1.9SUSE-SU-2026:0063-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 8, 2026 -
Low max 1.8SUSE-SU-2026:0361-1 1 CVE
Security update for logback
This update for logback fixes the following issues: - CVE-2026-1225: ACE vulnerability in configuration file (bsc#1257094)
first Feb 2, 2026 -
Low max 3.7SUSE-SU-2025:4278-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)
first Nov 27, 2025 -
Low max 2.3SUSE-SU-2025:3869-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 0.7.18+git.0.8485a75. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences could be injected into terminal output when logged (bsc#1249013).
first Oct 30, 2025 -
Low max 3.3SUSE-SU-2025:3812-1 1 CVE
Security update for cmake
This update for cmake fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation (bsc#1248461)
first Oct 27, 2025 -
Low max 3.6SUSE-SU-2025:21044-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyComma…
first Nov 14, 2025 -
Low max 2.0SUSE-SU-2025:21014-1 1 CVE
Security update for openexr
This update for openexr fixes the following issues: - CVE-2025-64181: Fixed use of uninitialized memory in function generic_unpack() (bsc#1253233)
first Nov 19, 2025 -
Low max 3.7SUSE-SU-2025:20673-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-6052: Fix overflow check when expanding a GString (bsc#1244596).
first Sep 5, 2025 -
Low max 2.7SUSE-SU-2025:20458-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: * Fixed regressions for the recent malicious subkey DoS fix for CVE-2025-30258 (bsc#1239119).
first Jun 30, 2025 -
Low max 3.3SUSE-SU-2025:20415-1 1 CVE
Security update for augeas
This update for augeas fixes the following issues: - CVE-2025-2588: Fixed NULL pointer dereference when calling re_case_expand in function fa_expand_nocase (bsc#1239909)
first Jun 11, 2025