6,765 results · Clear filters · Feed
-
Medium max 5.4openSUSE-SU-2026:21145-1 3 CVEs
Security update for mbedtls-2
This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - Enable SRTP and DTLS protocols needed by some software. - Update to version 2.28.10: Default behavior changes * In TLS clients, if mbedtls_ssl_set_hostname() has not been called, mb…
first Jun 22, 2026 -
Medium max 5.6openSUSE-SU-2026:21143-1 3 CVEs
Security update for gleam
This update for gleam fixes the following issues: Changes in gleam: - Update to 1.17.0: * Fixed security vulnerabilities: - Restrict custom documentation page `path` and `source` values so `gleam docs build` cannot escape the docs output directory or project …
first Jun 23, 2026 -
Medium max 5.1openSUSE-SU-2026:21134-1 2 CVEs
Security update for glycin-loaders
This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). - CVE-2025-58160: tracing-subscr…
first Jun 20, 2026 -
Medium max 4.3openSUSE-SU-2026:21130-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
Medium max 6.9openSUSE-SU-2026:21098-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jun 19, 2026 -
Medium max 5.3openSUSE-SU-2026:21078-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Jun 18, 2026 -
Medium max 5.0openSUSE-SU-2026:21070-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Medium max 6.1openSUSE-SU-2026:21063-1 1 CVE
Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve
This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version (bsc#1268243) Changes…
first Jun 26, 2026 -
Medium max 6.3openSUSE-SU-2026:21062-1 2 CVEs
Security update for capnproto
This update for capnproto fixes the following issues: Update to version 1.4.0. Security issues fixed: - CVE-2026-32239: negative `Content-Length` conversion treated as impossibly large length by KJ-HTTP can lead to HTTP smuggling (bsc#1259638). - CVE-2026-322…
first Jun 26, 2026 -
Medium max 6.8openSUSE-SU-2026:21059-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
Medium max 6.9openSUSE-SU-2026:21048-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Medium max 6.5openSUSE-SU-2026:21045-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: authorization and proxy-authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jun 24, 2026 -
Medium max 5.9openSUSE-SU-2026:21021-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026 -
Medium max 6.5openSUSE-SU-2026:21014-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Medium max 4.0SUSE-SU-2026:22270-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Medium max 5.5SUSE-SU-2026:22263-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:22260-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 6.5SUSE-SU-2026:22258-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Medium max 4.0openSUSE-SU-2026:21047-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Medium max 4.3openSUSE-SU-2026:21036-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Non security issue: - Update to version 3.0.5 (jsc#SLE-23879).
first Jun 22, 2026 -
Medium max 5.5openSUSE-SU-2026:21032-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Medium max 4.7openSUSE-SU-2026:21028-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 6.3openSUSE-SU-2026:21025-1 1 CVE
Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass (bsc#1264265). Changes for keylime: - Update to version 7.14.2.
first Jun 22, 2026 -
Medium max 4.1openSUSE-SU-2026:20993-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669).
first Jun 20, 2026 -
Medium max 6.8SUSE-SU-2026:22293-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
Medium max 5.0SUSE-SU-2026:22289-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Medium max 6.9SUSE-SU-2026:22271-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Medium max 5.9SUSE-SU-2026:22255-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026 -
Medium max 5.0openSUSE-SU-2026:21171-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-40917: plug-ins: Clean up ICNS file loading (bsc#1262199).
first Jun 29, 2026 -
Medium max 4.9openSUSE-SU-2026:21169-1 1 CVE
Security update for python-biopython
This update for python-biopython fixes the following issues: Changes in python-biopython: - CVE-2025-68463: Fixed a information disclosure caused by a XXE vulnerability (boo#1255465).
first Jun 29, 2026 -
Medium max 5.5openSUSE-SU-2026:21166-1 3 CVEs
Security update for nano
This update for nano fixes the following issues: Changes in nano: - Update to version 9.1: * When searching, the viewport is placed snug left where possible. * The ability to read and write files in old Mac format (a lone carriage return as line ending) was r…
first Jun 29, 2026 -
Medium max 6.8openSUSE-SU-2026:21075-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jun 28, 2026 -
Medium max 6.8SUSE-SU-2026:22291-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jun 28, 2026 -
Medium max 5.3openSUSE-SU-2026:11148-1 1 CVE
python311-pydata-sphinx-theme-0.19.0-1.1 on GA media
These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
Medium max 5.0SUSE-SU-2026:2678-1 3 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220). -…
first Jun 29, 2026 -
Medium max 5.3SUSE-SU-2026:2670-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 29, 2026 -
Medium max 6.8SUSE-SU-2026:2685-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).
first Jun 29, 2026 -
Medium max 5.3openSUSE-SU-2026:11129-1 2 CVEs
assimp-devel-6.0.5-4.1 on GA media
These are all security issues fixed in the assimp-devel-6.0.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 27, 2026 -
Medium max 6.5openSUSE-SU-2026:11134-1 1 CVE
libslirp-devel-4.9.3+4-1.1 on GA media
These are all security issues fixed in the libslirp-devel-4.9.3+4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 27, 2026 -
Medium max 6.8SUSE-SU-2026:2645-1 3 CVEs
Security update for dovecot22
This update for dovecot22 fixes the following issues - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-40020: IMAP folders can be shared-spammed to everyone (bsc#1265149). - CVE-2026-42006: imap-login:…
first Jun 26, 2026