898 results · Clear filters · Feed
-
Low max 2.9SUSE-SU-2026:22757-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 20, 2026 -
Low max 2.0SUSE-SU-2026:22753-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 18, 2026 -
Low max 3.1openSUSE-SU-2026:11325-1 1 CVE
agama-web-ui-23+0.f26ed5eab-49.1 on GA media
These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed.
first Jul 22, 2026 -
Low max 2.9SUSE-SU-2026:3201-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
first Jul 22, 2026 -
Low max 2.0openSUSE-SU-2026:21371-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 18, 2026 -
Low max 2.1SUSE-SU-2026:22603-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 21, 2026 -
Low max 2.5SUSE-SU-2026:3150-1 1 CVE
Security update for iproute2
This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
first Jul 21, 2026 -
Low max 3.7SUSE-SU-2026:3159-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bs…
first Jul 21, 2026 -
Low max 3.7openSUSE-SU-2026:11310-1 14 CVEs
ImageMagick-7.1.2.27-3.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Low max 3.3openSUSE-SU-2026:11306-1 1 CVE
kbfs-6.6.3-3.1 on GA media
These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
Low max 1.8SUSE-SU-2026:3116-1 1 CVE
Security update for libqt4
This update for libqt4 fixes the following issue - CVE-2025-14575: local user can load rogue CA certificates as trusted system authority via a crafted file placed in the application's working directory (bsc#1265896).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3111-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3097-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3095-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3096-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Low max 3.4SUSE-SU-2026:3093-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jul 17, 2026 -
Low max 3.3openSUSE-SU-2026:11301-1 1 CVE
runc-1.4.3-1.1 on GA media
These are all security issues fixed in the runc-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Low max 3.7SUSE-SU-2026:22631-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM client can lead to memory disclosure (bsc#1268885).
first Jul 10, 2026 -
Low max 3.7openSUSE-SU-2026:11273-1 8 CVEs
ImageMagick-7.1.2.27-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Low max 3.4SUSE-SU-2026:3031-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jul 15, 2026 -
Low max 3.7openSUSE-SU-2026:11267-1 1 CVE
libeverest-3.6.7-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Low max 2.1openSUSE-SU-2026:21331-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 13, 2026 -
Low max 3.7openSUSE-SU-2026:21303-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM client can lead to memory disclosure (bsc#1268885).
first Jul 10, 2026 -
Low max 1.8openSUSE-SU-2026:11258-1 1 CVE
libxml2-16-2.15.3-2.1 on GA media
These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
Low max 3.3openSUSE-SU-2026:11247-1 2 CVEs
libredwg-devel-0.14.8413-1.1 on GA media
These are all security issues fixed in the libredwg-devel-0.14.8413-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
Low max 3.7openSUSE-SU-2026:11215-1 1 CVE
libmbedtls23-4.2.0-1.1 on GA media
These are all security issues fixed in the libmbedtls23-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
Low max 2.9openSUSE-SU-2026:11213-1 1 CVE
dirmngr-2.5.21-1.1 on GA media
These are all security issues fixed in the dirmngr-2.5.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
Low max 2.1openSUSE-SU-2026:11204-1 1 CVE
ruby4.0-rubygem-uri-1.1.1-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Low max 2.1openSUSE-SU-2026:11187-1 1 CVE
helm3-3.21.2-2.1 on GA media
These are all security issues fixed in the helm3-3.21.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Low max 2.1openSUSE-SU-2026:11186-1 1 CVE
helm-4.2.2-2.1 on GA media
These are all security issues fixed in the helm-4.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Low max 3.7SUSE-SU-2026:2781-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jul 6, 2026 -
Low max 3.7SUSE-SU-2026:2780-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue
first Jul 6, 2026 -
Low max 2.0openSUSE-SU-2026:11174-1 1 CVE
gzip-1.14-2.1 on GA media
These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2026 -
Low max 3.3openSUSE-SU-2026:11165-1 1 CVE
alloy-1.17.1-1.1 on GA media
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2026 -
Low max 2.3SUSE-SU-2026:22380-1 1 CVE
Security update for loupe
This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation (bsc#1249009). Changes for loupe: - Update to version 48.2: - Check if the is-hidden prope…
first Jun 28, 2026 -
Low max 2.7SUSE-SU-2026:22352-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
Low max 3.7SUSE-SU-2026:22340-1 6 CVEs
Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: `strfcpy` used instead of `memcpy` for the IMAP `auth_cram` MD5 digest (bsc#1263897). - CVE-2026-43860: truncation of `hash_passwd` by one byte for IMAP `auth_cram` MD5 digest (bsc#1263896). - …
first Jun 22, 2026 -
Low max 3.7SUSE-SU-2026:22335-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jun 22, 2026 -
Low max 2.1SUSE-SU-2026:22325-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
Low max 2.9SUSE-SU-2026:2712-1 1 CVE
Security update for xdg-desktop-portal
This update for xdg-desktop-portal fixes the following issue: - CVE-2026-40354: File deletion via symlink attack (bsc#1262045).
first Jun 30, 2026