6,765 results · Clear filters · Feed
-
Medium max 4.8SUSE-SU-2026:4055-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4054-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777)…
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:4053-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 7, 2026 -
Medium max 6.2SUSE-SU-2026:4050-1 1 CVE
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664).
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:4049-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 7, 2026 -
Medium max 6.5SUSE-SU-2026:4046-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 7, 2026 -
Medium max 5.6SUSE-SU-2026:4030-1 1 CVE
Security update for python313-pip
This update for python313-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Sep 7, 2026 -
Medium max 5.4SUSE-SU-2026:4029-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Sep 7, 2026 -
Medium max 5.3SUSE-SU-2026:4028-1 1 CVE
Security update for httpcomponents-client
This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported `Content-Encoding` header value in a response message (bsc#1273163).
first Sep 7, 2026 -
Medium max 5.5SUSE-SU-2026:4027-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-68743: oversized length parameters in authentication requests can cause heap out-of-bounds reads (bsc#1273925).
first Sep 7, 2026 -
Medium max 4.2SUSE-SU-2026:4023-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
first Sep 7, 2026 -
Medium max 4.6SUSE-SU-2026:4012-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 7, 2026 -
Medium max 6.5SUSE-SU-2026:4007-1 1 CVE
Security update for file-roller
This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4006-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4002-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…
first Sep 7, 2026 -
Medium max 4.0SUSE-SU-2026:4000-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:3998-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777)…
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:3978-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 4, 2026 -
Medium max 4.2SUSE-SU-2026:3973-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). Changes for libsoup2: - update after changes in the public suffix list: '*.bd' is no longer in the p…
first Sep 4, 2026 -
Medium max 5.3SUSE-SU-2026:3972-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Sep 4, 2026 -
Medium max 5.3SUSE-SU-2026:3970-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Sep 4, 2026 -
Medium max 5.6SUSE-SU-2026:3969-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 4, 2026 -
Medium max 4.0SUSE-SU-2026:3964-1 1 CVE
Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:3960-1 1 CVE
Security update for file-roller
This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:3959-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: denial of service via uncontrolled memory allocation from craft…
first Sep 3, 2026 -
Medium max 6.8openSUSE-SU-2026:21833-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
Medium max 6.8openSUSE-SU-2026:11766-1 1 CVE
hauler-2.1.0-4.1 on GA media
These are all security issues fixed in the hauler-2.1.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 4.6openSUSE-SU-2026:11764-1 2 CVEs
coreutils-9.11-5.1 on GA media
These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 6.0openSUSE-SU-2026:11763-1 1 CVE
ant-1.10.18-1.1 on GA media
These are all security issues fixed in the ant-1.10.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 5.9openSUSE-SU-2026:21827-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Medium max 6.5openSUSE-SU-2026:11753-1 1 CVE
libBasicUsageEnvironment2-2026.08.25-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2026.08.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Medium max 5.3SUSE-SU-2026:3951-1 1 CVE
Security update for erlang
This update for erlang fixes the following issue: - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc#1262503).
first Sep 3, 2026 -
Medium max 5.1SUSE-SU-2026:3900-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Aug 31, 2026 -
Medium max 5.3SUSE-SU-2026:3928-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276731).
first Sep 3, 2026 -
Medium max 4.8SUSE-SU-2026:3925-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 2, 2026 -
Medium max 6.7SUSE-SU-2026:3921-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue: - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Sep 2, 2026 -
Medium max 5.5SUSE-SU-2026:3899-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-68742: unvalidated address lengths in NSS responder packet parsing can cause a heap out-of-bounds read (bsc#1273922). - CVE-2026-68743: oversized length parameters in authentication requests can caus…
first Aug 31, 2026 -
Medium max 5.1SUSE-SU-2026:3933-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Sep 3, 2026 -
Medium max 5.5openSUSE-SU-2026:21815-1 1 CVE
Security update for waylyrics
This update for waylyrics fixes the following issues: Changes in waylyrics: - Update to version 0.4.0 (CVE-2026-25541 bsc#1274106) * Added plugin architecture and SakuraLLM translation plugin * Added OpenCC support for Simplified/Traditional Chinese * Added s…
first Sep 8, 2026 -
Medium max 6.9
sshamble-0.3.12-1.1 on GA media
These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026