6,765 results · Clear filters · Feed
-
Medium max 6.6SUSE-SU-2026:3924-1 1 CVE
Security update for texlive
This update for texlive fixes the following issue: - CVE-2026-63729: heap use-after-free in the SyncTeX parser can lead to application crash or arbitrary code execution when malformed `.synctex` or `.synctex.gz` files are processed(bsc#1272432).
first Sep 2, 2026 -
Medium max 5.3SUSE-SU-2026:3883-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).
first Aug 31, 2026 -
Medium max 6.5SUSE-SU-2026:3868-1 1 CVE
Security update for quagga
This update for quagga fixes the following issue: - CVE-2026-37458: missing input validation in the `MP_REACH_NLRI` component allows authenticated attackers to cause a DoS via a crafted UPDATE message (bsc#1263974).
first Aug 28, 2026 -
Medium max 6.9SUSE-SU-2026:23392-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).
first Aug 27, 2026 -
Medium max 6.9SUSE-SU-2026:23363-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623). - crafted LZ…
first Aug 28, 2026 -
Medium max 6.9SUSE-SU-2026:23356-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623). - Crafted LZ…
first Aug 28, 2026 -
Medium max 4.6SUSE-SU-2026:23355-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Aug 28, 2026 -
Medium max 5.5SUSE-SU-2026:23347-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder socket (bsc#1273922). - CVE…
first Aug 25, 2026 -
Medium max 5.6SUSE-SU-2026:23319-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 25, 2026 -
Medium max 5.7SUSE-SU-2026:23312-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004). - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). -…
first Aug 24, 2026 -
Medium max 6.5SUSE-SU-2026:23308-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).
first Aug 24, 2026 -
Medium max 5.4openSUSE-SU-2026:21795-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests (bsc#1275231)
first Sep 3, 2026 -
Medium max 5.5openSUSE-SU-2026:21794-1 1 CVE
Security update for supergfxctl
This update for supergfxctl fixes the following issues: Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' (CVE-2026-25541 boo#1274336) - Update to version 1762634235.5d503b1: * Added GfxMode::Integrated, GfxMode::Hybrid to the Asus…
first Sep 3, 2026 -
Medium max 5.3openSUSE-SU-2026:21787-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update go.opentelemetry.io/otel to 1.44.0 to fix CVE-2026-41178: It caused 'Parse' to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized in…
first Sep 2, 2026 -
Medium max 5.1openSUSE-SU-2026:21777-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 6, 2026 -
Medium max 6.5openSUSE-SU-2026:21773-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 6, 2026 -
Medium max 6.8openSUSE-SU-2026:21771-1 2 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276612). - CVE-2026-81092: github.com/mark3labs/mcp-go/serv…
first Sep 6, 2026 -
Medium max 5.3openSUSE-SU-2026:21768-1 1 CVE
Security update for msgpack-c
This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation (bsc#1275911).
first Sep 6, 2026 -
Medium max 6.5openSUSE-SU-2026:21765-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 4.8openSUSE-SU-2026:21762-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Medium max 6.8openSUSE-SU-2026:21759-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 4, 2026 -
Medium max 4.0openSUSE-SU-2026:21758-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 4, 2026 -
Medium max 5.3openSUSE-SU-2026:21755-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).
first Sep 3, 2026 -
Medium max 6.7openSUSE-SU-2026:21754-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 5.5openSUSE-SU-2026:21748-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…
first Sep 3, 2026 -
Medium max 4.6openSUSE-SU-2026:21747-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 3, 2026 -
Medium max 6.8openSUSE-SU-2026:21745-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…
first Sep 3, 2026 -
Medium max 6.2openSUSE-SU-2026:21783-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
Medium max 6.9openSUSE-SU-2026:11726-1 1 CVE
python313-pypdf-6.16.2-3.1 on GA media
These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Medium max 5.4openSUSE-SU-2026:11725-1 1 CVE
jupyter-nbconvert-7.17.1-2.1 on GA media
These are all security issues fixed in the jupyter-nbconvert-7.17.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Medium max 4.0openSUSE-SU-2026:11724-1 1 CVE
python313-geopy-2.5.0-1.1 on GA media
These are all security issues fixed in the python313-geopy-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Medium max 6.5openSUSE-SU-2026:11728-1 1 CVE
rpcbind-1.2.9-2.1 on GA media
These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Medium max 6.9openSUSE-SU-2026:11721-1 1 CVE
libmariadb-devel-3.4.9-2.1 on GA media
These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Medium max 5.9openSUSE-SU-2026:11706-1 4 CVEs
bson-devel-2.5.2-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 7, 2026 -
Medium max 6.8openSUSE-SU-2026:11712-1 3 CVEs
python313-jwcrypto-1.6.0-1.1 on GA media
These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 7, 2026 -
Medium max 6.2openSUSE-SU-2026:11711-1 1 CVE
python313-idna-3.19-1.1 on GA media
These are all security issues fixed in the python313-idna-3.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 7, 2026 -
Medium max 5.6openSUSE-SU-2026:11690-1 3 CVEs
python310-3.10.20-10.1 on GA media
These are all security issues fixed in the python310-3.10.20-10.1 package on the GA media of openSUSE Tumbleweed.
first Sep 4, 2026 -
Medium max 5.5openSUSE-SU-2026:11679-1 2 CVEs
agama-24+0.a836cced5-54.1 on GA media
These are all security issues fixed in the agama-24+0.a836cced5-54.1 package on the GA media of openSUSE Tumbleweed.
first Sep 4, 2026 -
Medium max 6.9SUSE-SU-2026:3851-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821).
first Aug 28, 2026 -
Medium max 5.6SUSE-SU-2026:3846-1 1 CVE
Security update for python36-pip
This update for python36-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 27, 2026