6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:3032-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jul 15, 2026 -
Medium max 5.9SUSE-SU-2026:3028-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…
first Jul 15, 2026 -
Medium max 5.1SUSE-SU-2026:3021-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 15, 2026 -
Medium max 5.9SUSE-SU-2026:3004-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 15, 2026 -
Medium max 5.9openSUSE-SU-2026:21320-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Medium max 6.5openSUSE-SU-2026:21317-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
Medium max 6.7SUSE-SU-2026:22576-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…
first Jul 7, 2026 -
Medium max 6.3SUSE-SU-2026:22561-1 1 CVE
Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…
first Jul 6, 2026 -
Medium max 5.6openSUSE-SU-2026:11269-1 1 CVE
php8-8.5.8-1.1 on GA media
These are all security issues fixed in the php8-8.5.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Medium max 5.0SUSE-SU-2026:2954-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 14, 2026 -
Medium max 6.5openSUSE-SU-2026:21351-1 3 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - Add UI web assets as additional source tarball - Update to version 12.4.5 (jsc#PED-16512): * Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/…
first Jul 14, 2026 -
Medium max 6.2openSUSE-SU-2026:21336-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 14, 2026 -
Medium max 4.6openSUSE-SU-2026:21332-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
Medium max 5.7SUSE-SU-2026:2984-1 1 CVE
Security update for python3-dulwich
This update for python3-dulwich fixes the following issues: - CVE-2026-47734: Do not honour receive.maxInputSize to bound received packs (bsc#1268138)
first Jul 14, 2026 -
Medium max 6.8SUSE-SU-2026:2981-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189). Changes for ucode-intel: - Intel CPU Microcode was updated to the 20260512 release (bsc#1265189). **New Platforms** | Processor | Step…
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2982-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect leads to open redirect (bsc#1268324).
first Jul 14, 2026 -
Medium max 5.9SUSE-SU-2026:2974-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2968-1 2 CVEs
Security update for python-Authlib
This update for python-Authlib fixes the following issues - CVE-2026-41425: Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth (bsc#1263114). - CVE-2026-44681: Prior to 1.6.12 and 1.7.1, an unauthe…
first Jul 14, 2026 -
Medium max 6.2SUSE-SU-2026:2967-1 1 CVE
Security update for libgnt, meson, pidgin
This update for libgnt, meson, pidgin fixes the following issues Security issue: - CVE-2019-25544: denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation (b…
first Jul 14, 2026 -
Medium max 6.8SUSE-SU-2026:2963-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189). Other changes: - Intel CPU Microcode was updated to the 20260512 release (bsc#1265189). **New Platforms** | Processor | Stepping | F-M…
first Jul 14, 2026 -
Medium max 6.5SUSE-SU-2026:2962-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: LWP: UserAgent: Authorization and Proxy-Authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2949-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML input in `render_toc_ul` can lead to XSS (bsc#1265052).
first Jul 14, 2026 -
Medium max 6.5SUSE-SU-2026:2931-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 13, 2026 -
Medium max 4.6SUSE-SU-2026:2922-1 3 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…
first Jul 13, 2026 -
Medium max 6.7SUSE-SU-2026:22550-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…
first Jul 7, 2026 -
Medium max 6.3SUSE-SU-2026:22542-1 1 CVE
Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…
first Jul 6, 2026 -
Medium max 6.5SUSE-SU-2026:2886-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 13, 2026 -
Medium max 6.8SUSE-SU-2026:2885-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that can allow attackers to corrupt memory (bsc#1268853).
first Jul 13, 2026 -
Medium max 5.4SUSE-SU-2026:2883-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Jul 13, 2026 -
Medium max 6.1openSUSE-SU-2026:21313-1 3 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response (bsc#1271029) - CVE-2026-53877: Heap buffer over-read in GDALRaster (bsc#1271030) - CVE-202…
first Jul 10, 2026 -
Medium max 5.4openSUSE-SU-2026:21302-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
Medium max 5.1openSUSE-SU-2026:21297-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 10, 2026 -
Medium max 5.6openSUSE-SU-2026:21308-1 1 CVE
Security update for php8
This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).
first Jul 12, 2026 -
Medium max 4.6openSUSE-SU-2026:11260-1 2 CVEs
patch-2.8-3.1 on GA media
These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
Medium max 5.3openSUSE-SU-2026:11259-1 1 CVE
libopenbabel8-3.2.1-1.1 on GA media
These are all security issues fixed in the libopenbabel8-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
Medium max 6.5openSUSE-SU-2026:11257-1 1 CVE
freetype2-devel-2.14.3-1.1 on GA media
These are all security issues fixed in the freetype2-devel-2.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
Medium max 6.5openSUSE-SU-2026:21276-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Enable building of SUID starter for SLES 15 (jsc#PED-16347). * Security fix for CVE-2026-2303 (bsc#1270529): Heap Out-of-Bounds Read in GSSAPI Error Handling in go.mongodb.org/mongo…
first Jul 8, 2026 -
Medium max 6.7openSUSE-SU-2026:11250-1 1 CVE
qemu-11.0.2-1.1 on GA media
These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
Medium max 6.5openSUSE-SU-2026:11249-1 1 CVE
python313-weasyprint-69.0-1.1 on GA media
These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
Medium max 6.5openSUSE-SU-2026:11253-1 1 CVE
wpa_supplicant-2.11-7.1 on GA media
These are all security issues fixed in the wpa_supplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026