6,765 results · Clear filters · Feed
-
Medium max 5.0SUSE-SU-2026:2849-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 10, 2026 -
Medium max 5.9SUSE-SU-2026:2848-1 3 CVEs
Security update for krb5, krb5-mini
This update for krb5, krb5-mini fixes the following issues - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131). - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#126336…
first Jul 10, 2026 -
Medium max 5.0SUSE-SU-2026:2847-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 10, 2026 -
Medium max 6.1openSUSE-SU-2026:11239-1 1 CVE
python313-tornado6-6.5.7-2.1 on GA media
These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Medium max 6.1openSUSE-SU-2026:11236-1 3 CVEs
python313-Django6-6.0.7-1.1 on GA media
These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Medium max 6.5openSUSE-SU-2026:11228-1 15 CVEs
ImageMagick-7.1.2.27-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Medium max 4.3SUSE-SU-2026:2810-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jul 9, 2026 -
Medium max 6.9SUSE-SU-2026:2828-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jul 9, 2026 -
Medium max 4.8SUSE-SU-2026:2819-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues - CVE-2026-48588: potential exposure of private data via cached `Set-Cookie` response (bsc#1271029). - CVE-2026-53877: information disclosure via 32-byte heap buffer overread in `GDALRaster` (bsc#127103…
first Jul 9, 2026 -
Medium max 6.4SUSE-SU-2026:2809-1 1 CVE
Security update for systemd
This update for systemd fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 37508f8ec1 (bsc#1267647). - Import commit c7530fbea…
first Jul 9, 2026 -
Medium max 6.5SUSE-RU-2026:2815-1 1 CVE
Recommended update for apptainer
This update for apptainer contains the following fixes: Security fixes included on this update: - CVE-2026-2303: go.mongodb.org/mongo-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1270529). Other fixes: - Enable building of SUID starter for SL…
first Jul 9, 2026 -
Medium max 5.0openSUSE-SU-2026:21238-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 5, 2026 -
Medium max 6.5SUSE-SU-2026:22514-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issue - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 3, 2026 -
Medium max 6.7SUSE-SU-2026:20998-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Medium max 5.4SUSE-SU-2026:20765-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
Medium max 5.3openSUSE-SU-2026:11216-1 1 CVE
mihomo-1.19.28-1.1 on GA media
These are all security issues fixed in the mihomo-1.19.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
Medium max 6.7openSUSE-SU-2026:21253-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…
first Jul 7, 2026 -
Medium max 5.3openSUSE-SU-2026:21242-1 5 CVEs
Security update for assimp
This update for assimp fixes the following issues - CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a heap-based buffer overflow (bsc#1251019). - CVE-2026-10197: NULL pointer dereference in ImportEmbeddedTextures when mime…
first Jul 6, 2026 -
Medium max 6.3openSUSE-SU-2026:21220-1 1 CVE
Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…
first Jul 6, 2026 -
Medium max 6.5openSUSE-SU-2026:11226-1 1 CVE
woodstox-core-7.2.1-1.1 on GA media
These are all security issues fixed in the woodstox-core-7.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
Medium max 5.9openSUSE-SU-2026:11201-1 1 CVE
pam-1.7.2+git12-2.1 on GA media
These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Medium max 6.5openSUSE-SU-2026:11197-1 1 CVE
apptainer-1.5.1-3.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Medium max 6.4SUSE-SU-2026:2785-1 1 CVE
Security update for systemd, systemd-mini
This update for systemd, systemd-mini fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit eba1930de8 (bsc#1267647). - Import co…
first Jul 8, 2026 -
Medium max 5.3SUSE-SU-2026:2758-1 2 CVEs
Security update for python-pip
This update for python-pip fixes the following issues - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442).
first Jul 3, 2026 -
Medium max 6.8SUSE-SU-2026:2757-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).
first Jul 3, 2026 -
Medium max 6.1SUSE-SU-2026:2756-1 1 CVE
Security update for gimp
This update for gimp fixes the following issue: - CVE-2026-4887: Memory disclosure and denial of service via specially crafted PCX image (bsc#1260837).
first Jul 3, 2026 -
Medium max 6.8SUSE-SU-2026:2755-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jul 3, 2026 -
Medium max 4.0SUSE-SU-2026:22506-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jul 1, 2026 -
Medium max 6.5openSUSE-SU-2026:11188-1 4 CVEs
json-c-devel-0.19-1.1 on GA media
These are all security issues fixed in the json-c-devel-0.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Medium max 6.1openSUSE-SU-2026:11185-1 1 CVE
gi-docgen-2026.1-1.1 on GA media
These are all security issues fixed in the gi-docgen-2026.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Medium max 5.1SUSE-SU-2026:22302-1 2 CVEs
Security update for glycin-loaders
This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). - CVE-2025-58160: tracing-subscr…
-
Medium max 6.0openSUSE-SU-2026:21225-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: - Version 3.0.0 * Sec…
first Jul 3, 2026 -
Medium max 6.5SUSE-SU-2026:22452-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issue - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jun 30, 2026 -
Medium max 5.0SUSE-SU-2026:22450-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jun 30, 2026 -
Medium max 5.9SUSE-SU-2026:22449-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jun 30, 2026 -
Medium max 5.1SUSE-SU-2026:22395-1 1 CVE
Security update for crun
This update for crun fixes the following issue - CVE-2026-47766: crun follows rootfs /dev symlink while creating default devices (bsc#1268302).
first Jun 24, 2026 -
Medium max 6.8SUSE-SU-2026:2740-1 1 CVE
Security update for golang-github-docker-libnetwork
This update for golang-github-docker-libnetwork fixes the following issue - CVE-2026-2808: github.com/hashicorp/consul: unvalidated user-supplied file paths can lead to arbitrary file reads through the Vault Kubernetes authentication provider (bsc#1259566).
first Jul 3, 2026 -
Medium max 6.5SUSE-SU-2026:2732-1 6 CVEs
Security update for cups
This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). …
first Jul 2, 2026 -
Medium max 5.5SUSE-SU-2026:2745-1 1 CVE
Security update for firewalld-legacy
This update for firewalld-legacy fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jul 3, 2026 -
Medium max 4.0openSUSE-SU-2026:21202-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jul 1, 2026