898 results · Clear filters · Feed
-
Low max 2.9SUSE-SU-2026:23007-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 28, 2026 -
Low max 3.3SUSE-SU-2026:23047-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations (bsc#1268275). Changes for runc: - update to 1.3.6: * Various integration test improve…
first Aug 3, 2026 -
Low max 3.7SUSE-SU-2026:23038-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bs…
first Jul 29, 2026 -
Low max 2.5SUSE-SU-2026:23037-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 29, 2026 -
Low max 3.3SUSE-SU-2026:3433-2 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Aug 10, 2026 -
Low max 3.3SUSE-SU-2026:3428-2 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Aug 10, 2026 -
Low max 2.0openSUSE-SU-2026:11461-1 1 CVE
fuse-overlayfs-1.17-1.1 on GA media
These are all security issues fixed in the fuse-overlayfs-1.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
Low max 3.3openSUSE-SU-2026:11443-1 1 CVE
amazon-ecs-init-1.106.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.106.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 4, 2026 -
Low max 3.7SUSE-SU-2026:3490-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (b…
-
Low max 2.3openSUSE-SU-2026:21515-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)
first Jul 31, 2026 -
Low max 2.3openSUSE-SU-2026:11423-1 1 CVE
python313-joserfc-1.7.4-2.1 on GA media
These are all security issues fixed in the python313-joserfc-1.7.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Low max 3.3openSUSE-SU-2026:21492-1 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels
first Jul 29, 2026 -
Low max 1.7SUSE-SU-2026:3424-1 1 CVE
Security update for python3-pyOpenSSL
This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in `set_tlsext_servername_callback` callback can result in connection not being cancelled and allows for possible security measure bypassing (bsc#1259804).
first Jul 30, 2026 -
Low max 1.8openSUSE-SU-2026:21468-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496).
first Jul 28, 2026 -
Low max 1.8SUSE-SU-2026:3395-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-61464: heap buffer overwrite when running an X11 import with a crafted window title (bsc#1271496).
first Jul 28, 2026 -
Low max 3.3SUSE-SU-2026:22954-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
Low max 3.3SUSE-SU-2026:22946-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
Low max 2.5SUSE-SU-2026:22936-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.9SUSE-SU-2026:3243-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 24, 2026 -
Low max 2.0SUSE-SU-2026:3241-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue: - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 24, 2026 -
Low max 2.9SUSE-SU-2026:22923-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue - CVE-2026-57062: CMS parsing in `gpgsm` mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 24, 2026 -
Low max 2.0SUSE-SU-2026:22918-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the `gzexe` utility when the `mktemp` utility is not available in a user's `PATH` (bsc#1269622).
first Jul 23, 2026 -
Low max 2.0SUSE-SU-2026:22906-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the `gzexe` utility when the `mktemp` utility is not available in a user's `PATH` (bsc#1269622).
first Jul 24, 2026 -
Low max 1.8SUSE-SU-2026:22894-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 22, 2026 -
Low max 2.5SUSE-SU-2026:22862-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.9SUSE-SU-2026:22825-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 20, 2026 -
Low max 2.0SUSE-SU-2026:22818-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 18, 2026 -
Low max 1.8SUSE-SU-2026:22806-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 22, 2026 -
Low max 2.1SUSE-SU-2026:22650-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 21, 2026 -
Low max 3.7SUSE-SU-2026:3281-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bs…
first Jul 27, 2026 -
Low max 2.0SUSE-SU-2026:3269-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue: - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 27, 2026 -
Low max 3.3openSUSE-SU-2026:21442-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
Low max 3.5openSUSE-SU-2026:11370-1 1 CVE
python-magic-wormhole-bash-completion-0.24.0-1.1 on GA media
These are all security issues fixed in the python-magic-wormhole-bash-completion-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Low max 2.9openSUSE-SU-2026:21401-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
first Jul 21, 2026 -
Low max 2.9openSUSE-SU-2026:21385-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 20, 2026 -
Low max 2.5openSUSE-SU-2026:21429-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.9openSUSE-SU-2026:11344-1 1 CVE
GraphicsMagick-1.3.47-5.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
Low max 2.5SUSE-SU-2026:3223-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.5SUSE-SU-2026:3222-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.1SUSE-SU-2026:3211-1 1 CVE
Security update for gawk
This update for gawk fixes the following issue: - CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352).
first Jul 23, 2026