6,765 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2026:23633-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 6, 2026 -
Medium max 5.3SUSE-SU-2026:23630-1 1 CVE
Security update for msgpack-c
This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation (bsc#1275911).
first Sep 6, 2026 -
Medium max 6.9SUSE-SU-2026:23572-1 6 CVEs
Security update for gstreamer-devtools
This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subsc…
first Aug 30, 2026 -
Medium max 6.8SUSE-SU-2026:23564-1 1 CVE
Security update for librest
This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).
first Aug 30, 2026 -
Medium max 5.3SUSE-SU-2026:23563-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Aug 30, 2026 -
Medium max 6.9SUSE-SU-2026:23550-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).
first Aug 27, 2026 -
Medium max 5.7SUSE-SU-2026:4376-1 14 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582). - CVE-2026-62946…
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:4373-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 28, 2026 -
Medium max 5.3SUSE-SU-2026:4365-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Sep 28, 2026 -
Medium max 6.5SUSE-SU-2026:4363-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:23879-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 22, 2026 -
Medium max 5.3SUSE-SU-2026:23880-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 22, 2026 -
Medium max 6.5SUSE-SU-2026:23878-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 22, 2026 -
Medium max 4.3SUSE-SU-2026:23877-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 21, 2026 -
Medium max 4.8SUSE-SU-2026:23800-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues - CVE-2026-0716: out-of-bounds read when processing a crafted unmasked frame with a payload length near `UINT64_MAX` sent by a WebSocket server (bsc#1256418).
first Sep 17, 2026 -
Medium max 6.5SUSE-SU-2026:23792-1 3 CVEs
Security update for kronosnet
This update for kronosnet fixes the following issues: - CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments can lead to potential exposure of encryption keys (bsc#1271923). - CVE-2026-15812: im…
first Sep 15, 2026 -
Medium max 6.5SUSE-SU-2026:23782-1 3 CVEs
Security update for kronosnet
This update for kronosnet fixes the following issues: - CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments can lead to potential exposure of encryption keys (bsc#1271923). - CVE-2026-15812: im…
first Sep 15, 2026 -
Medium max 6.8SUSE-SU-2026:23735-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 14, 2026 -
Medium max 6.1SUSE-SU-2026:4351-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917).
first Sep 25, 2026 -
Medium max 6.1SUSE-SU-2026:4350-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 25, 2026 -
Medium max 6.5openSUSE-SU-2026:21953-1 1 CVE
Security update for python-asyncssh
This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets (bsc#1280972)
first Sep 23, 2026 -
Medium max 4.3openSUSE-SU-2026:21929-1 6 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: Update to 3.8.8 (bugfix release): - CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL (bsc#1279908) - CVE-2026-61908: JMAP email-header blob ID out-of-bounds index (bsc…
first Sep 22, 2026 -
Medium max 6.2openSUSE-SU-2026:21928-1 1 CVE
Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery (SSRF) (bsc#1279942)
first Sep 21, 2026 -
Medium max 5.9openSUSE-SU-2026:21925-1 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
first Sep 21, 2026 -
Medium max 5.3openSUSE-SU-2026:21894-1 1 CVE
Security update for httpcomponents-client
This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported `Content-Encoding` header value in a response message (bsc#1273163).
first Sep 20, 2026 -
Medium max 4.3openSUSE-SU-2026:21893-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 20, 2026 -
Medium max 5.0openSUSE-SU-2026:21873-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to…
first Sep 17, 2026 -
Medium max 4.8openSUSE-SU-2026:21871-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues - CVE-2026-0716: out-of-bounds read when processing a crafted unmasked frame with a payload length near `UINT64_MAX` sent by a WebSocket server (bsc#1256418).
first Sep 17, 2026 -
Medium max 6.3openSUSE-SU-2026:11886-1 4 CVEs
python311-3.11.16-2.1 on GA media
These are all security issues fixed in the python311-3.11.16-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Medium max 6.3openSUSE-SU-2026:11885-1 2 CVEs
libpoppler-cpp3-26.09.0-2.1 on GA media
These are all security issues fixed in the libpoppler-cpp3-26.09.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Medium max 5.6openSUSE-SU-2026:11883-1 4 CVEs
pcapplusplus-devel-26.07-1.1 on GA media
These are all security issues fixed in the pcapplusplus-devel-26.07-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Medium max 6.3openSUSE-SU-2026:11875-1 2 CVEs
helm-4.3.0-3.1 on GA media
These are all security issues fixed in the helm-4.3.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Medium max 6.3openSUSE-SU-2026:11872-1 2 CVEs
distribution-registry-3.1.1-8.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.1-8.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Medium max 5.9SUSE-SU-2026:23313-1 3 CVEs
Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized `encaps_derand` pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed o…
first Sep 21, 2026 -
Medium max 6.5SUSE-SU-2026:21434-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-35206: specially crafted Chart will have co…
first Sep 21, 2026 -
Medium max 5.4openSUSE-SU-2026:21955-1 1 CVE
Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host spoofing (boo#1281749)
first Sep 24, 2026 -
Medium max 5.3SUSE-SU-2026:4348-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). Changes for glib2: - Fix segfault when monitoring hard links (bsc#1281419).
-
Medium max 6.8SUSE-SU-2026:4339-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764). Ch…
-
Medium max 4.3openSUSE-SU-2026:11867-1 4 CVEs
python313-vllm-0.30.0-1.1 on GA media
These are all security issues fixed in the python313-vllm-0.30.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
Medium max 6.3openSUSE-SU-2026:11868-1 3 CVEs
python314-3.14.7-2.1 on GA media
These are all security issues fixed in the python314-3.14.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026