898 results · Clear filters · Feed
-
Low max 3.4openSUSE-SU-2026:21127-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jun 20, 2026 -
Low max 2.7openSUSE-SU-2026:21044-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
Low max 2.1openSUSE-SU-2026:21024-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
Low max 3.7openSUSE-SU-2026:21020-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jun 22, 2026 -
Low max 3.7openSUSE-SU-2026:21016-1 6 CVEs
Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: `strfcpy` used instead of `memcpy` for the IMAP `auth_cram` MD5 digest (bsc#1263897). - CVE-2026-43860: truncation of `hash_passwd` by one byte for IMAP `auth_cram` MD5 digest (bsc#1263896). - …
first Jun 22, 2026 -
Low max 2.7SUSE-SU-2026:22268-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
Low max 2.1SUSE-SU-2026:22256-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
Low max 2.3openSUSE-SU-2026:21074-1 1 CVE
Security update for loupe
This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation (bsc#1249009). Changes for loupe: - Update to version 48.2: - Check if the is-hidden prope…
first Jun 28, 2026 -
Low max 2.7SUSE-SU-2026:2663-1 4 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues - CVE-2025-54080: out-of-bounds read in `Exiv2::EpsImage::writeMetadata()` when writing metadata into a crafted image file (bsc#1248962). - CVE-2026-25884: out-of-bounds read in `CrwMap::decode0x0805` (bsc#1259…
first Jun 26, 2026 -
Low max 2.1openSUSE-SU-2026:11120-1 1 CVE
nano-9.1-1.1 on GA media
These are all security issues fixed in the nano-9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Low max 2.5SUSE-SU-2026:2620-1 1 CVE
Security update for iproute2
This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Other updates: - support display of bound but unconnected sockets (bsc#1204562)
first Jun 24, 2026 -
Low max 3.7openSUSE-SU-2026:20985-1 1 CVE
Security update for hostapd
This update for hostapd fixes the following issues: Changes in hostapd: - bsc#1268083 - hostapd segmentation fault during fast restart cycles. - CVE-2025-24912: hostapd fails to process crafted RADIUS packets properly (bsc#1239461)
first Jun 15, 2026 -
Low max 3.9openSUSE-SU-2026:20967-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
Low max 3.7openSUSE-SU-2026:11099-1 3 CVEs
python311-python-multipart-0.0.32-1.1 on GA media
These are all security issues fixed in the python311-python-multipart-0.0.32-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Low max 3.4SUSE-SU-2026:22192-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jun 20, 2026 -
Low max 1.3openSUSE-SU-2026:11108-1 1 CVE
grafana-12.4.4-1.1 on GA media
These are all security issues fixed in the grafana-12.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Low max 3.3openSUSE-SU-2026:11104-1 1 CVE
NetworkManager-applet-openvpn-1.12.5-1.1 on GA media
These are all security issues fixed in the NetworkManager-applet-openvpn-1.12.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Low max 3.7openSUSE-SU-2026:11058-1 1 CVE
python311-starlette-1.3.1-1.1 on GA media
These are all security issues fixed in the python311-starlette-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Low max 3.9SUSE-SU-2026:22126-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
Low max 3.9SUSE-SU-2026:22114-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
Low max 2.9SUSE-SU-2026:22084-1 1 CVE
Security update for uriparser
This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption (bsc#1255000).
first Jun 5, 2026 -
Low max 3.3SUSE-SU-2026:22093-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
Low max 3.3SUSE-SU-2026:22086-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)
first Jun 5, 2026 -
Low max 2.3openSUSE-SU-2026:11039-1 1 CVE
libvinylapi3-9.0.1-1.1 on GA media
These are all security issues fixed in the libvinylapi3-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Low max 2.3openSUSE-SU-2026:11028-1 1 CVE
librav1e0_8-0.8.1-2.1 on GA media
These are all security issues fixed in the librav1e0_8-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Low max 3.1openSUSE-SU-2026:20937-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-6873: Signed cookie salt namespace collision (bsc#1267578) - CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend (bsc#1267579) …
first Jun 10, 2026 -
Low max 3.3openSUSE-SU-2026:20931-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
Low max 2.7SUSE-SU-2026:22067-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-35388: Added missing askpass check for proxy-mode multiplexing sessions (bsc#1261441) - CVE-2026-3497: Fixed a possible information disclosure or denial of service due to uninitialized variables i…
first Jun 4, 2026 -
Low max 3.3SUSE-SU-2026:22058-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
Low max 2.9openSUSE-SU-2026:20948-1 1 CVE
Security update for enc
This update for enc fixes the following issues: Changes in enc: - CVE-2026-1229: Fix incorrect value (bsc#1265533) Bump circl to 1.6.3 - Update to 1.1.5: * Update dependencies #10 - Update to 1.1.4: * Update all dependencies #9
first Jun 12, 2026 -
Low max 2.9openSUSE-SU-2026:11016-1 1 CVE
logback-1.5.34-2.1 on GA media
These are all security issues fixed in the logback-1.5.34-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Low max 3.1openSUSE-SU-2026:11003-1 5 CVEs
python313-Django6-6.0.6-1.1 on GA media
These are all security issues fixed in the python313-Django6-6.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Low max 3.1openSUSE-SU-2026:11002-1 5 CVEs
python311-Django-5.2.15-1.1 on GA media
These are all security issues fixed in the python311-Django-5.2.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Low max 2.9openSUSE-SU-2026:10999-1 1 CVE
logback-1.5.34-1.1 on GA media
These are all security issues fixed in the logback-1.5.34-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Low max 2.9openSUSE-SU-2026:10995-1 1 CVE
enc-1.1.5-2.1 on GA media
These are all security issues fixed in the enc-1.1.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Low max 2.3openSUSE-SU-2026:10992-1 1 CVE
alloy-1.16.1-2.1 on GA media
These are all security issues fixed in the alloy-1.16.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Low max 3.1openSUSE-SU-2026:10989-1 5 CVEs
python311-Django4-4.2.30-3.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.30-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
Low max 3.1SUSE-SU-2026:2318-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues - CVE-2026-6873: signed cookie salt namespace collision in `django.http.HttpRequest.get_signed_cookie` (bsc#1267578). - CVE-2026-7666: potential unencrypted email transmission via `STARTTLS` in the SMTP…
first Jun 9, 2026 -
Low max 3.3SUSE-SU-2026:22047-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)
first Jun 5, 2026 -
Low max 2.5SUSE-SU-2026:2309-1 1 CVE
Security update for podofo
This update for podofo fixes the following issue: - CVE-2026-44348: double-free in `compute_hash_to_sign()` in `src/podofo/private/OpenSSLInternal_Ripped.cpp` (bsc#1265320).
first Jun 9, 2026