6,765 results · Clear filters · Feed
-
Medium max 6.9SUSE-SU-2026:3207-1 19 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient restrictions in header/trailer handling can cause uncapped memory usage and a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a excessive…
first Jul 23, 2026 -
Medium max 5.9SUSE-SU-2026:3205-1 3 CVEs
Security update for wget
This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58470: server-controlled `Content-Range` header values can cause an integer over…
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3218-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3216-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
Medium max 5.4SUSE-SU-2026:3225-1 1 CVE
Security update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni
This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues fixed: - CVE-2026-26032: improper pathname limitation in `PackagerResolver` allows for arbitrary files writes outside of the configured `build…
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3217-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
Medium max 5.1SUSE-SU-2026:22767-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash (bsc#1271351). - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permi…
first Jul 20, 2026 -
Medium max 6.7SUSE-SU-2026:22760-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 20, 2026 -
Medium max 6.5SUSE-SU-2026:22750-1 2 CVEs
Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in t…
first Jul 16, 2026 -
Medium max 6.5SUSE-SU-2026:22739-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
first Jul 15, 2026 -
Medium max 5.4SUSE-SU-2026:22707-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
Medium max 5.9SUSE-SU-2026:22706-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…
first Jul 10, 2026 -
Medium max 5.0SUSE-SU-2026:22702-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 7, 2026 -
Medium max 5.4openSUSE-SU-2026:11326-1 1 CVE
apache-ivy-2.6.0-1.1 on GA media
These are all security issues fixed in the apache-ivy-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 22, 2026 -
Medium max 5.1openSUSE-SU-2026:11324-1 1 CVE
afterburn-5.10.0.git73.b97f772-2.1 on GA media
These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:3194-1 25 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496). - CVE-2026-61859: pol…
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:3192-1 13 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `Ope…
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:3193-1 23 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `Ope…
first Jul 22, 2026 -
Medium max 6.7SUSE-SU-2026:3182-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service (bsc#1262684).
first Jul 22, 2026 -
Medium max 6.0openSUSE-SU-2026:21383-1 1 CVE
Security update for beets
This update for beets fixes the following issues: Changes in beets: - CVE-2026-42052: Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. (boo#1263988)
first Jul 20, 2026 -
Medium max 6.5openSUSE-SU-2026:21375-1 3 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions (bsc#1268902). - CVE-2026-5…
first Jul 18, 2026 -
Medium max 6.6openSUSE-SU-2026:21372-1 8 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead …
first Jul 18, 2026 -
Medium max 6.4SUSE-SU-2026:22736-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644).…
first Jul 16, 2026 -
Medium max 6.2SUSE-SU-2026:3169-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 21, 2026 -
Medium max 5.4SUSE-SU-2026:3153-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Jul 21, 2026 -
Medium max 5.3openSUSE-SU-2026:11322-1 1 CVE
python313-Js2Py-0.74-6.1 on GA media
These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
Medium max 5.6SUSE-SU-2026:3165-1 1 CVE
Security update for php7
This update for php7 fixes the following issue - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).
first Jul 21, 2026 -
Medium max 5.4SUSE-SU-2026:3154-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Jul 21, 2026 -
Medium max 5.3SUSE-SU-2026:3149-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).
first Jul 21, 2026 -
Medium max 5.6SUSE-SU-2026:3164-1 1 CVE
Security update for php8
This update for php8 fixes the following issues - Update to version 8.3.32 - CVE-2026-12184: Failure to setup TLS with a remote server can result in a remote DoS (bsc#1270712). - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension c…
first Jul 21, 2026 -
Medium max 5.9SUSE-SU-2026:3163-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).
first Jul 21, 2026 -
Medium max 5.9SUSE-SU-2026:3162-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).
first Jul 21, 2026 -
Medium max 4.6SUSE-SU-2026:3161-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 21, 2026 -
Medium max 5.3SUSE-SU-2026:22668-1 1 CVE
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc#1268882).
first Jul 9, 2026 -
Medium max 6.8SUSE-SU-2026:22667-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jul 7, 2026 -
Medium max 4.8openSUSE-SU-2026:11316-1 1 CVE
libsoup-3_0-0-3.6.6-7.1 on GA media
These are all security issues fixed in the libsoup-3_0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 5.5openSUSE-SU-2026:11313-1 1 CVE
avahi-0.8-45.1 on GA media
These are all security issues fixed in the avahi-0.8-45.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 5.4openSUSE-SU-2026:11311-1 2 CVEs
MozillaFirefox-152.0.6-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 6.9openSUSE-SU-2026:11317-1 1 CVE
iscsiuio-0.7.8.8-112.1 on GA media
These are all security issues fixed in the iscsiuio-0.7.8.8-112.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 6.8SUSE-SU-2026:3124-1 1 CVE
Security update for microcode_ctl
This update for microcode_ctl fixes the following issue: - CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks (bsc#1265189). Changes for microcode_ctl: - Intel CPU Microcode was updated to the 20260512…
first Jul 20, 2026