6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:22860-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250). Non security issue fixed: - KDE Discover ignores package locks (bsc#1…
first Jul 22, 2026 -
Medium max 5.4SUSE-SU-2026:22858-1 1 CVE
Security update for apache-ivy
This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting arbitrary files outside the configured "buildRoot" directory (bsc#1271727). Changes for apache-ivy: - Upgrade to …
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:22853-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451). Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoi…
first Jul 22, 2026 -
Medium max 6.5SUSE-SU-2026:22851-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-o…
first Jul 22, 2026 -
Medium max 6.9SUSE-SU-2026:22844-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: * Fix compilation with G…
first Jul 22, 2026 -
Medium max 5.1SUSE-SU-2026:22831-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash (bsc#1271351). - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permi…
first Jul 20, 2026 -
Medium max 5.5SUSE-SU-2026:22829-1 11 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPi…
first Jul 20, 2026 -
Medium max 6.7SUSE-SU-2026:22826-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 20, 2026 -
Medium max 6.5SUSE-SU-2026:22822-1 3 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions (bsc#1268902). - CVE-2026-5…
first Jul 18, 2026 -
Medium max 6.6SUSE-SU-2026:22819-1 8 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead …
first Jul 18, 2026 -
Medium max 6.5SUSE-SU-2026:22815-1 2 CVEs
Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in t…
first Jul 16, 2026 -
Medium max 6.5SUSE-SU-2026:22814-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
first Jul 15, 2026 -
Medium max 5.9SUSE-SU-2026:22807-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).
first Jul 22, 2026 -
Medium max 6.5SUSE-SU-2026:3302-1 8 CVEs
Security update for libssh
This update for libssh fixes the following issues - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-598…
first Jul 27, 2026 -
Medium max 6.8SUSE-SU-2026:3270-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that can allow attackers to corrupt memory (bsc#1268853).
first Jul 27, 2026 -
Medium max 6.5SUSE-SU-2026:3273-1 3 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass …
first Jul 27, 2026 -
Medium max 5.1openSUSE-SU-2026:11379-1 2 CVEs
spice-vdagent-0.23.0-4.1 on GA media
These are all security issues fixed in the spice-vdagent-0.23.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 6.5openSUSE-SU-2026:11378-1 1 CVE
python313-CherryPy-18.10.0-4.1 on GA media
These are all security issues fixed in the python313-CherryPy-18.10.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 6.7openSUSE-SU-2026:11377-1 9 CVEs
libssh-config-0.11.5-1.1 on GA media
These are all security issues fixed in the libssh-config-0.11.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 6.7openSUSE-SU-2026:21444-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
Medium max 5.6openSUSE-SU-2026:11369-1 1 CVE
opennlp-1.9.5-2.1 on GA media
These are all security issues fixed in the opennlp-1.9.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.3openSUSE-SU-2026:11368-1 6 CVEs
openjfx-17.0.20.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.3openSUSE-SU-2026:11365-1 1 CVE
liboqs-devel-0.16.0-2.1 on GA media
These are all security issues fixed in the liboqs-devel-0.16.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 6.5openSUSE-SU-2026:11364-1 3 CVEs
libknet-devel-1.33-2.1 on GA media
These are all security issues fixed in the libknet-devel-1.33-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 6.5openSUSE-SU-2026:11361-1 1 CVE
ffmpeg-7-7.1.4-5.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.5openSUSE-SU-2026:21417-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451). Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoi…
first Jul 22, 2026 -
Medium max 6.5openSUSE-SU-2026:21415-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-o…
first Jul 22, 2026 -
Medium max 5.1openSUSE-SU-2026:21393-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash (bsc#1271351). - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permi…
first Jul 20, 2026 -
Medium max 5.4openSUSE-SU-2026:21424-1 1 CVE
Security update for apache-ivy
This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting arbitrary files outside the configured "buildRoot" directory (bsc#1271727). Changes for apache-ivy: - Upgrade to …
first Jul 22, 2026 -
Medium max 6.9openSUSE-SU-2026:21409-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: * Fix compilation with G…
first Jul 22, 2026 -
Medium max 5.5openSUSE-SU-2026:21391-1 11 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPi…
first Jul 20, 2026 -
Medium max 6.7openSUSE-SU-2026:21387-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 20, 2026 -
Medium max 5.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.75 (jsc#ECO-3319): - Added Ism profile for OL8, OL9 - Added new product kylinserver10 - Created OL10 product - Release SLMicro5 product - Replaced two date injections by SO…
first Feb 14, 2025 -
Medium max 6.1
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter was updated from version 1.0.1 to 1.0.8: - Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency in version 1.0.2 (bsc#1213933) - Bugs fixed: * Require G…
first Nov 18, 2024 -
Medium max 6.7
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for auto…
first Dec 13, 2023 -
Medium max 5.3
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441) * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cach…
first Sep 28, 2023 -
Medium max 6.1
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2023-28370: Tornado: Fix an open redirect issue in the static file handler (bsc#1211741) - Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994) - Fix ModuleNotF…
first Aug 2, 2023 -
Medium max 4.3openSUSE-SU-2026:21425-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250). Non security issue fixed: - KDE Discover ignores package locks (bsc#1…
first Jul 22, 2026 -
Medium max 5.5openSUSE-SU-2026:21428-1 1 CVE
Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1271392). Other updates and bugfixes: - Ve…
first Jul 22, 2026 -
Medium max 6.6SUSE-SU-2026:3208-1 8 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead…
first Jul 23, 2026