6,765 results · Clear filters · Feed
-
Medium max 5.5openSUSE-SU-2026:11495-1 1 CVE
git-cliff-2.13.1-1.1 on GA media
These are all security issues fixed in the git-cliff-2.13.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
Medium max 5.3openSUSE-SU-2026:11493-1 1 CVE
buildpacks-cli-0.40.9-1.1 on GA media
These are all security issues fixed in the buildpacks-cli-0.40.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
Medium max 6.5openSUSE-SU-2026:11492-1 3 CVEs
aws-efs-utils-3.2.0-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
Medium max 5.6SUSE-SU-2026:3589-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 11, 2026 -
Medium max 5.6SUSE-SU-2026:3588-1 1 CVE
Security update for python3-pip
This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 11, 2026 -
Medium max 5.3SUSE-SU-2026:3586-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue: - CVE-2026-64685: heap buffer over-read in BGR decoder due to missing end-of-file check (bsc#1272953).
first Aug 11, 2026 -
Medium max 5.1SUSE-SU-2026:3585-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: Security fixes: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write ar…
first Aug 11, 2026 -
Medium max 5.3SUSE-SU-2026:3571-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue: - CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check (bsc#1272953).
first Aug 11, 2026 -
Medium max 6.9openSUSE-SU-2026:11488-1 7 CVEs
java-21-openj9-21.0.12.0-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
Medium max 6.9openSUSE-SU-2026:11486-1 7 CVEs
java-17-openj9-17.0.20.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
Medium max 6.9openSUSE-SU-2026:11489-1 7 CVEs
java-25-openj9-25.0.4.0-1.1 on GA media
These are all security issues fixed in the java-25-openj9-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
Medium max 5.5openSUSE-SU-2026:11482-1 1 CVE
wild-0.10.0-2.1 on GA media
These are all security issues fixed in the wild-0.10.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Medium max 6.8openSUSE-SU-2026:11477-1 1 CVE
librest-1_0-0-0.10.2-2.1 on GA media
These are all security issues fixed in the librest-1_0-0-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Medium max 5.5openSUSE-SU-2026:11475-1 3 CVEs
kak-lsp-21.0.2-1.1 on GA media
These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Medium max 6.4SUSE-SU-2026:22999-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
Medium max 6.5SUSE-SU-2026:3527-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).
first Aug 7, 2026 -
Medium max 5.3openSUSE-SU-2026:11471-1 1 CVE
tekton-cli-0.46.0-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
Medium max 5.3openSUSE-SU-2026:21533-1 7 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.html#change-1.9.15 - https://www.dnsdist.org/changelog.html#change-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output pr…
first Aug 5, 2026 -
Medium max 5.5openSUSE-SU-2026:11455-1 1 CVE
libvirt-12.6.0-1.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
Medium max 6.6SUSE-SU-2026:3512-1 1 CVE
Security update for evince
This update for evince fixes the following issue: - CVE-2026-63729: texlive: heap use-after-free in `synctex_parser.c` via a malformed `.synctex` or `.synctex.gz` file (bsc#1272433).
first Aug 5, 2026 -
Medium max 6.3openSUSE-SU-2026:11458-1 1 CVE
jupyter-nbdime-7.0.4-24.1 on GA media
These are all security issues fixed in the jupyter-nbdime-7.0.4-24.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
Medium max 5.3openSUSE-SU-2026:11450-1 1 CVE
perl-Mojo-JWT-1.20.0-2.1 on GA media
These are all security issues fixed in the perl-Mojo-JWT-1.20.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 4, 2026 -
Medium max 5.6openSUSE-SU-2026:11451-1 1 CVE
python311-pip-26.2-1.1 on GA media
These are all security issues fixed in the python311-pip-26.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 4, 2026 -
Medium max 6.8SUSE-SU-2026:3492-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that can allow attackers to corrupt memory (bsc#1268853).
-
Medium max 6.7SUSE-SU-2026:3491-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service (bsc#1262684).
-
Medium max 5.1SUSE-SU-2026:3485-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to…
-
Medium max 5.1SUSE-SU-2026:3470-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to…
first Aug 3, 2026 -
Medium max 6.5SUSE-SU-2026:3463-1 7 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service…
first Aug 3, 2026 -
Medium max 5.3SUSE-SU-2026:3459-1 1 CVE
Security update for python3-dulwich
This update for python3-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py (bsc#1271525).
first Aug 3, 2026 -
Medium max 5.1SUSE-SU-2026:3455-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free in the `io.c` program file via the `do_getline_redir()` routine (bsc#1271351). - CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352). - CVE-2026-40553…
first Aug 3, 2026 -
Medium max 5.3openSUSE-SU-2026:11433-1 1 CVE
ImageMagick-7.1.2.28-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.28-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Medium max 6.4openSUSE-SU-2026:21507-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
Medium max 5.1openSUSE-SU-2026:21506-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` allows a compromised SPICE host to crash the `spice-vdagent` daemon via a specially crafted message that triggers a heap buffer overflow (bsc#12695…
first Jul 31, 2026 -
Medium max 5.3openSUSE-SU-2026:11425-1 1 CVE
python313-sentry-sdk-2.66.1-1.1 on GA media
These are all security issues fixed in the python313-sentry-sdk-2.66.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Medium max 4.7openSUSE-SU-2026:11417-1 1 CVE
libntpc1-1.2.5-1.1 on GA media
These are all security issues fixed in the libntpc1-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Medium max 5.3openSUSE-SU-2026:11415-1 1 CVE
gio-branding-upstream-2.88.3-1.1 on GA media
These are all security issues fixed in the gio-branding-upstream-2.88.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Medium max 5.9openSUSE-SU-2026:11424-1 2 CVEs
python313-pydantic-2.13.4-2.1 on GA media
These are all security issues fixed in the python313-pydantic-2.13.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Medium max 5.0openSUSE-SU-2026:11420-1 1 CVE
python313-asteval-1.0.9-1.1 on GA media
These are all security issues fixed in the python313-asteval-1.0.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2026 -
Medium max 6.6openSUSE-SU-2026:11412-1 1 CVE
evince-48.4-2.1 on GA media
These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 31, 2026 -
Medium max 5.3openSUSE-SU-2026:11411-1 7 CVEs
dnsdist-2.0.7-1.1 on GA media
These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 31, 2026