898 results · Clear filters · Feed
-
Low max 3.7openSUSE-SU-2026:11903-1 1 CVE
python313-django-allauth-65.19.4-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Low max 3.8SUSE-SU-2026:23697-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Low max 2.0SUSE-SU-2026:23618-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).
first Sep 3, 2026 -
Low max 2.3SUSE-SU-2026:23607-1 1 CVE
Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged (bsc#1249011).
first Sep 2, 2026 -
Low max 3.8SUSE-SU-2026:23717-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Low max 2.3SUSE-SU-2026:23567-1 1 CVE
Security update for rav1e
This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and terminal manipulation (bsc#1249016). Changes for rav1e: - Update cargo dependencies.
first Aug 30, 2026 -
Low max 3.7openSUSE-SU-2026:21911-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…
first Sep 22, 2026 -
Low max 3.7SUSE-SU-2026:4334-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: denial of service vi…
-
Low max 3.7openSUSE-SU-2026:11854-1 5 CVEs
ImageMagick-7.1.2.31-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.31-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
Low max 3.7openSUSE-SU-2026:11814-1 1 CVE
jsch-2.28.7-1.1 on GA media
These are all security issues fixed in the jsch-2.28.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 18, 2026 -
Low max 3.7SUSE-SU-2026:4265-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: denial of service vi…
first Sep 18, 2026 -
Low max 3.7openSUSE-SU-2026:11801-1 5 CVEs
ImageMagick-7.1.2.31-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.31-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2026 -
Low max 3.7openSUSE-SU-2026:21865-1 1 CVE
Security update for mbedtls
This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to version 3.6.7: * CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised group (boo#1280186) * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected grou…
first Sep 16, 2026 -
Low max 3.3openSUSE-SU-2026:11792-1 1 CVE
7zip-26.03-1.1 on GA media
These are all security issues fixed in the 7zip-26.03-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Low max 3.8SUSE-SU-2026:23543-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Low max 3.3openSUSE-SU-2026:11789-1 1 CVE
jq-1.8.2-2.1 on GA media
These are all security issues fixed in the jq-1.8.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Low max 3.3openSUSE-SU-2026:11786-1 1 CVE
discount-3.0.2.0-1.1 on GA media
These are all security issues fixed in the discount-3.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Low max 3.8SUSE-SU-2026:23527-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 8, 2026 -
Low max 3.3openSUSE-SU-2026:11777-1 1 CVE
liblzmasdk26-26.03-1.1 on GA media
These are all security issues fixed in the liblzmasdk26-26.03-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Low max 3.8SUSE-SU-2026:4123-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 10, 2026 -
Low max 3.8SUSE-SU-2026:4122-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 10, 2026 -
Low max 3.8SUSE-SU-2026:4108-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Low max 2.0SUSE-SU-2026:4104-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists (bsc#1257599)
first Sep 9, 2026 -
Low max 3.8SUSE-SU-2026:23478-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 8, 2026 -
Low max 2.0SUSE-SU-2026:23469-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).
first Sep 3, 2026 -
Low max 2.0SUSE-SU-2026:4026-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation (bsc#1273100).
first Sep 7, 2026 -
Low max 3.8openSUSE-SU-2026:21820-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Low max 3.1openSUSE-SU-2026:21789-1 1 CVE
Security update for python-apprise
This update for python-apprise fixes the following issues: Changes in python-apprise: - CVE-2026-59180: Information disclosure via HTTP redirect following with credential resending (bsc#1271342)
first Sep 2, 2026 -
Low max 2.0openSUSE-SU-2026:21753-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).
first Sep 3, 2026 -
Low max 2.3openSUSE-SU-2026:21741-1 1 CVE
Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged (bsc#1249011).
first Sep 2, 2026 -
Low max 2.9openSUSE-SU-2026:11650-1 2 CVEs
gopass-1.17.0-1.1 on GA media
These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 31, 2026 -
Low max 2.3openSUSE-SU-2026:21681-1 1 CVE
Security update for rav1e
This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and terminal manipulation (bsc#1249016). Changes for rav1e: - Update cargo dependencies.
first Aug 30, 2026 -
Low max 2.0SUSE-SU-2026:23252-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation (bsc#1273100).
first Aug 24, 2026 -
Low max 3.3SUSE-SU-2026:23234-1 1 CVE
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF …
first Aug 12, 2026 -
Low max 2.0openSUSE-SU-2026:21664-1 1 CVE
Security update for pyenv
This update for pyenv fixes the following issues: Changes in pyenv: - CVE-2026-68939: a matching attacker-controlled file can silently select a different installed interpreter or version (bsc#1275661)
first Aug 26, 2026 -
Low max 2.0openSUSE-SU-2026:11613-1 1 CVE
pyenv-2.8.4-1.1 on GA media
These are all security issues fixed in the pyenv-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
Low max 3.3SUSE-SU-2026:23164-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations (bsc#1268275). Changes for runc: - update to 1.3.6: * Various integration test improve…
first Aug 4, 2026 -
Low max 3.3openSUSE-SU-2026:21574-1 1 CVE
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF …
first Aug 12, 2026 -
Low max 2.5SUSE-SU-2026:23076-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Aug 3, 2026 -
Low max 3.7openSUSE-SU-2026:11510-1 1 CVE
python313-nltk-3.10.2-1.1 on GA media
These are all security issues fixed in the python313-nltk-3.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026