6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:3121-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jul 20, 2026 -
Medium max 6.9SUSE-SU-2026:3135-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 20, 2026 -
Medium max 6.9SUSE-SU-2026:3134-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 20, 2026 -
Medium max 6.5openSUSE-SU-2026:21367-1 9 CVEs
Security update for lux
This update for lux fixes the following issues: Changes in lux: - CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506: Issues when parsing HTML files (bsc#1267110) - CVE-2024-45338: Denial of service due to non-linear parsing of cas…
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21368-1 9 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - Update to 3.8.7 (bugfix release) - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack (bsc#1271617) - CVE-2026-47083: ESEARCH cross-user content oracle (b…
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21364-1 1 CVE
Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-49452: CSS Injection via Presentational Hints (bsc#1270401)
first Jul 16, 2026 -
Medium max 5.7SUSE-SU-2026:3117-1 1 CVE
Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin packs (bsc#1268138).
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3110-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 17, 2026 -
Medium max 6.5SUSE-SU-2026:3103-1 2 CVEs
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (b…
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3100-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3101-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jul 17, 2026 -
Medium max 5.8SUSE-SU-2026:3090-1 5 CVEs
Security update for ruby3.4
This update for ruby3.4 fixes the following issues - CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments (bsc#1268011). - CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in 'raw' argument (bsc#1268337). - CVE-2026-47241:…
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21362-1 2 CVEs
Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in t…
first Jul 16, 2026 -
Medium max 6.5openSUSE-SU-2026:11304-1 2 CVEs
system-user-zabbix-7.0.28-1.1 on GA media
These are all security issues fixed in the system-user-zabbix-7.0.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.9openSUSE-SU-2026:11303-1 1 CVE
wget-1.25.0-4.1 on GA media
These are all security issues fixed in the wget-1.25.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.7openSUSE-SU-2026:11296-1 1 CVE
opam-2.5.2-1.2 on GA media
These are all security issues fixed in the opam-2.5.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:11294-1 5 CVEs
lux-0.24.1-1.1 on GA media
These are all security issues fixed in the lux-0.24.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.5openSUSE-SU-2026:11289-1 1 CVE
firewall-applet-2.3.2-2.1 on GA media
These are all security issues fixed in the firewall-applet-2.3.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21360-1 1 CVE
Security update for hostapd
This update for hostapd fixes the following issues: Changes in hostapd: - CVE-2026-58374: Missing multi-link parsing validation in wpa_supplicant and hostapd (bsc#1269892)
first Jul 15, 2026 -
Medium max 6.2SUSE-SU-2026:22653-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 14, 2026 -
Medium max 4.6SUSE-SU-2026:22651-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
Medium max 5.9SUSE-SU-2026:22639-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:22636-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
Medium max 5.6SUSE-SU-2026:22635-1 1 CVE
Security update for php8
This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).
first Jul 12, 2026 -
Medium max 5.4SUSE-SU-2026:22630-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
Medium max 5.1SUSE-SU-2026:22627-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 10, 2026 -
Medium max 5.9SUSE-SU-2026:3082-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 16, 2026 -
Medium max 5.9SUSE-SU-2026:3076-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 16, 2026 -
Medium max 5.9SUSE-SU-2026:3074-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue Security changes: - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). Other changes: - rebuild libssh2_org against openssl 1.1.1, enabling ed25519 support. (bsc#1227490)
first Jul 16, 2026 -
Medium max 4.6SUSE-SU-2026:22604-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
Medium max 5.9SUSE-SU-2026:22599-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:22596-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
Medium max 5.4SUSE-SU-2026:22594-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
Medium max 5.5openSUSE-SU-2026:11280-1 1 CVE
nm-configurator-0.3.5-2.1 on GA media
These are all security issues fixed in the nm-configurator-0.3.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Medium max 6.5openSUSE-SU-2026:11278-1 1 CVE
hostapd-2.11-4.1 on GA media
These are all security issues fixed in the hostapd-2.11-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Medium max 6.5openSUSE-SU-2026:11279-1 2 CVEs
jackson-databind-2.18.9-2.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Medium max 6.9SUSE-SU-2026:3059-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jul 15, 2026 -
Medium max 6.6SUSE-SU-2026:3042-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issue - Rebase the CVE-2026-42014 patch to include a missing call to `p11_kit_uri_free()` in `gnutls_pkcs11_token_set_pin()` (bsc#1263713).
first Jul 15, 2026 -
Medium max 6.7SUSE-SU-2026:3038-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues - CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061). - CVE-2026-48004: heap use-after-free race condition allows a DoS by an unprivileged guest user (…
first Jul 15, 2026 -
Medium max 6.5SUSE-SU-2026:3033-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: LWP: UserAgent: Authorization and Proxy-Authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jul 15, 2026