6,765 results · Clear filters · Feed
-
Medium max 6.0openSUSE-SU-2026:21488-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled (bsc#1270413). - CVE-2026-13698: denial of service via memory leak t…
first Jul 30, 2026 -
Medium max 6.5openSUSE-SU-2026:21501-1 2 CVEs
Security update for s2n
This update for s2n fixes the following issues: Changes in s2n: - CVE-2026-16318: Denial of Service due to memory leak in QUIC transport parameters handler (bsc#1272352) - CVE-2026-16317: man-in-the-middle attack can silently discard individual application da…
first Jul 29, 2026 -
Medium max 5.7SUSE-SU-2026:3414-1 5 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argumen…
-
Medium max 5.7SUSE-SU-2026:3412-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when …
-
Medium max 5.3SUSE-SU-2026:3408-1 1 CVE
Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py (bsc#1271525).
first Jul 29, 2026 -
Medium max 6.0SUSE-SU-2026:3407-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled (bsc#1270413). - CVE-2026-13698: denial of service via memory leak t…
first Jul 29, 2026 -
Medium max 4.3SUSE-SU-2026:3405-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issue: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).
first Jul 29, 2026 -
Medium max 4.3SUSE-SU-2026:3404-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).
first Jul 29, 2026 -
Medium max 6.4SUSE-SU-2026:3401-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 29, 2026 -
Medium max 5.9SUSE-SU-2026:3420-1 3 CVEs
Security update for liboqs, oqs-provider
This update for liboqs, oqs-provider fixes the following issues: - disable KEM_HQC and SIG_MQOM and KEM_NTRUPRIME on s390x for now, testsuite shows them not working. Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - F…
-
Medium max 5.7SUSE-SU-2026:3413-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when …
-
Medium max 4.3openSUSE-SU-2026:11406-1 1 CVE
PackageKit-1.3.6-1.1 on GA media
These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
Medium max 5.1openSUSE-SU-2026:11405-1 4 CVEs
ImageMagick-7.1.2.28-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
Medium max 6.4SUSE-SU-2026:3394-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11391-1 1 CVE
kubernetes1.36-apiserver-1.36.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.36-apiserver-1.36.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11390-1 1 CVE
kubernetes1.35-apiserver-1.35.7-1.1 on GA media
These are all security issues fixed in the kubernetes1.35-apiserver-1.35.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11389-1 1 CVE
kubernetes1.34-apiserver-1.34.10-1.1 on GA media
These are all security issues fixed in the kubernetes1.34-apiserver-1.34.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11388-1 1 CVE
kubernetes1.33-apiserver-1.33.13-2.1 on GA media
These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.3openSUSE-SU-2026:11387-1 1 CVE
helm3-3.21.3-4.1 on GA media
These are all security issues fixed in the helm3-3.21.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.3openSUSE-SU-2026:11386-1 1 CVE
helm-4.2.3-4.1 on GA media
These are all security issues fixed in the helm-4.2.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 6.5SUSE-SU-2026:3333-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
first Jul 28, 2026 -
Medium max 6.5SUSE-SU-2026:3330-1 7 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service…
first Jul 28, 2026 -
Medium max 6.7SUSE-SU-2026:22956-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
Medium max 6.7SUSE-SU-2026:22948-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
Medium max 6.7SUSE-SU-2026:22940-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
Medium max 5.5SUSE-SU-2026:22935-1 1 CVE
Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1271392). Other updates and bugfixes: - Ve…
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:22932-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451). Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoi…
first Jul 22, 2026 -
Medium max 6.5SUSE-SU-2026:22931-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-o…
first Jul 22, 2026 -
Medium max 5.3SUSE-SU-2026:3390-1 1 CVE
Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn
This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: * New features: + Add SystemProperties.getPath(String, Supplier<Path>) + Add JavaVersion.JAVA_25 + Add Java…
first Jul 28, 2026 -
Medium max 6.4SUSE-SU-2026:3368-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 28, 2026 -
Medium max 6.5SUSE-SU-2026:3340-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue: - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
-
Medium max 6.7SUSE-SU-2026:22907-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue: - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 24, 2026 -
Medium max 4.6SUSE-SU-2026:22905-1 3 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…
first Jul 23, 2026 -
Medium max 5.9SUSE-SU-2026:22896-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 22, 2026 -
Medium max 5.4SUSE-SU-2026:22893-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 22, 2026 -
Medium max 6.4SUSE-SU-2026:3244-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Fix soft reboot not restarting user services with default.target…
first Jul 24, 2026 -
Medium max 4.8SUSE-SU-2026:22920-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - Incomplete fix for CVE-2026-12478: out-of-bounds read in the `process_frame()` function of `SoupWebSocketConnection` (bsc#1271401).
first Jul 24, 2026 -
Medium max 6.5SUSE-SU-2026:22922-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue - Update to version 2.14.3 - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates (bsc#1271045).
first Jul 24, 2026 -
Medium max 6.7SUSE-SU-2026:22919-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service (bsc#1262684).
first Jul 24, 2026 -
Medium max 6.4SUSE-SU-2026:22890-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644). …
first Jul 21, 2026