6,765 results · Clear filters · Feed
-
Medium max 5.3openSUSE-SU-2026:21189-1 1 CVE
Security update for transmission
This update for transmission fixes the following issues: Changes in transmission: - CVE-2026-38978: add clickjack safeguards when serving http responses (bsc#1267404).
first Jul 1, 2026 -
Medium max 5.9SUSE-SU-2026:22438-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 1, 2026 -
Medium max 5.9SUSE-SU-2026:22437-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 1, 2026 -
Medium max 6.5openSUSE-SU-2026:21216-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issue - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 2, 2026 -
Medium max 6.2openSUSE-SU-2026:21207-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
first Jul 2, 2026 -
Medium max 5.0openSUSE-SU-2026:11177-1 1 CVE
krb5-1.22.2-4.1 on GA media
These are all security issues fixed in the krb5-1.22.2-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2026 -
Medium max 5.3openSUSE-SU-2026:11172-1 1 CVE
dnsmasq-2.93-2.1 on GA media
These are all security issues fixed in the dnsmasq-2.93-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2026 -
Medium max 6.6SUSE-SU-2026:2724-1 1 CVE
Security update for python-python-dotenv
This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: follow symbolic links when rewriting `.env` files (bsc#1262423)
first Jul 1, 2026 -
Medium max 6.0SUSE-SU-2026:2723-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). Other updates and bugfixes: - Rewrite stru…
first Jul 1, 2026 -
Medium max 5.5openSUSE-SU-2026:21183-1 1 CVE
Security update for nilfs-utils
This update for nilfs-utils fixes the following issues: Changes in nilfs-utils: - CVE-2026-55392: Fixed undefined behavior in nilfs_sb_is_valid() (bsc#1268553)
first Jun 30, 2026 -
Medium max 5.3openSUSE-SU-2026:21179-1 3 CVEs
Security update for lrzip
This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: * Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzma_decompress_buf() and a NULL pointer dereference in ucompthr…
first Jun 30, 2026 -
Medium max 6.5openSUSE-SU-2026:21175-1 5 CVEs
Security update for python-zeroconf
This update for python-zeroconf fixes the following issues: Changes in python-zeroconf: - CVE-2026-47180: zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service (bsc#1268341) - CVE-2026-47183: zeroconf: Unb…
first Jun 30, 2026 -
Medium max 5.4openSUSE-SU-2026:11169-1 2 CVEs
python3-onionshare-2.6.4-1.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2026 -
Medium max 5.9openSUSE-SU-2026:11168-1 1 CVE
perl-CGI-Session-4.490.0-1.1 on GA media
These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2026 -
Medium max 6.3openSUSE-SU-2026:11166-1 1 CVE
c3p0-0.14.1-1.1 on GA media
These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2026 -
Medium max 6.5openSUSE-SU-2026:11164-1 2 CVEs
MozillaThunderbird-140.12.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2026 -
Medium max 6.8SUSE-SU-2026:22381-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jun 28, 2026 -
Medium max 5.0SUSE-SU-2026:22377-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Medium max 6.1SUSE-SU-2026:22370-1 1 CVE
Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve
This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version (bsc#1268243) Changes…
first Jun 26, 2026 -
Medium max 6.8SUSE-SU-2026:22365-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
Medium max 6.9SUSE-SU-2026:22356-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Medium max 4.0SUSE-SU-2026:22355-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Medium max 6.5SUSE-SU-2026:22353-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: authorization and proxy-authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jun 24, 2026 -
Medium max 4.3SUSE-SU-2026:22344-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Non security issue: - Update to version 3.0.5 (jsc#SLE-23879).
first Jun 22, 2026 -
Medium max 5.5SUSE-SU-2026:22343-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Medium max 6.5SUSE-SU-2026:22338-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:22332-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 6.3SUSE-SU-2026:22326-1 1 CVE
Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass (bsc#1264265). Changes for keylime: - Update to version 7.14.2.
first Jun 22, 2026 -
Medium max 5.9SUSE-SU-2026:22322-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026 -
Medium max 4.1SUSE-SU-2026:22300-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669).
first Jun 20, 2026 -
Medium max 4.3SUSE-SU-2026:22297-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
Medium max 6.5SUSE-SU-2026:2718-1 5 CVEs
Security update for cups
This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). …
first Jul 1, 2026 -
Medium max 6.5openSUSE-SU-2026:11157-1 1 CVE
perl-CSS-Minifier-XS-0.140.0-1.1 on GA media
These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 5.4openSUSE-SU-2026:11156-1 1 CVE
libnghttp2-14-1.69.0-2.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.69.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 6.5openSUSE-SU-2026:11152-1 1 CVE
amfora-1.11.0-3.1 on GA media
These are all security issues fixed in the amfora-1.11.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 5.0SUSE-SU-2026:2714-1 1 CVE
Security update for tar
This update for tar fixes the following issues Security fixes: - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). Other fixes: - Fix tar changing dir permissions temporarily even when using --no-overwrite-dir. - Fix --deref…
first Jun 30, 2026 -
Medium max 5.6SUSE-SU-2026:2713-1 2 CVEs
Security update for tracker
This update for tracker fixes the following issues: - CVE-2026-1765: heap buffer overflow vulnerability in `extract_txxx_tags` (bsc#1257607). - CVE-2026-1766: heap buffer overflow vulnerability in `get_id3v23_tags` (bsc#1257608).
first Jun 30, 2026 -
Medium max 5.3SUSE-SU-2026:2702-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 30, 2026 -
Medium max 5.0SUSE-SU-2026:2697-1 6 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper c…
first Jun 30, 2026 -
Medium max 6.5openSUSE-SU-2026:21146-1 1 CVE
Security update for lldpd
This update for lldpd fixes the following issues: Changes in lldpd: - Update to version 1.0.22 * Fix CVE-2026-46433, out-of-bound read access when removing VLAN tag (#787). * Reject 0-length management address in LLDP. * Fix race condition when creating the c…
first Jun 22, 2026