6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2026:2642-1 1 CVE
Security update for apache-commons-configuration2, apache-commons-text
This update for apache-commons-configuration2, apache-commons-text fixes the following issues - CVE-2026-45205: uncontrolled recursion leads to `StackOverflowError` when processing specially crafted configuration files (bsc#1265299). Changes for apache-common…
first Jun 26, 2026 -
Medium max 5.3SUSE-SU-2026:0906-2 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Jun 26, 2026 -
Medium max 5.0SUSE-SU-2026:2657-1 6 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper c…
first Jun 26, 2026 -
Medium max 6.0SUSE-SU-2026:2655-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970).
first Jun 26, 2026 -
Medium max 5.3SUSE-SU-2026:2654-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 26, 2026 -
Medium max 4.7SUSE-SU-2026:2653-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 26, 2026 -
Medium max 5.1SUSE-SU-2026:22247-1 1 CVE
Security update for crun
This update for crun fixes the following issue - CVE-2026-47766: crun follows rootfs /dev symlink while creating default devices (bsc#1268302).
first Jun 22, 2026 -
Medium max 5.9openSUSE-SU-2026:11116-1 1 CVE
dnsmasq-2.93-1.1 on GA media
These are all security issues fixed in the dnsmasq-2.93-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 6.2openSUSE-SU-2026:11115-1 1 CVE
GraphicsMagick-1.3.47-3.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 5.3SUSE-SU-2026:2634-1 3 CVEs
Security update for python-pip
This update for python-pip fixes the following issues - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442). - CVE-2026-8643…
first Jun 25, 2026 -
Medium max 5.0openSUSE-SU-2026:11125-1 1 CVE
tar-1.35-8.1 on GA media
These are all security issues fixed in the tar-1.35-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 6.2SUSE-SU-2026:2625-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
first Jun 24, 2026 -
Medium max 4.1SUSE-SU-2026:2615-1 1 CVE
Security update for tar
This update for tar fixes the following issues: Upgrade tar to version 1.34 (jsc#PED-16073). Security issues fixed: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Other updates and bugfixes: * Changes from 1.28…
first Jun 24, 2026 -
Medium max 6.5openSUSE-SU-2026:20984-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: * Fix multiple issues when parsing HTML files (bsc#1267153): CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506
first Jun 15, 2026 -
Medium max 5.3SUSE-SU-2026:22158-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Jun 18, 2026 -
Medium max 6.9SUSE-SU-2026:22173-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jun 19, 2026 -
Medium max 6.6openSUSE-SU-2026:11097-1 5 CVEs
python311-aiohttp-3.14.1-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 4.3openSUSE-SU-2026:11096-1 2 CVEs
libopenbabel8-3.2.0-2.1 on GA media
These are all security issues fixed in the libopenbabel8-3.2.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 5.5openSUSE-SU-2026:11094-1 1 CVE
libnilfs3-2.3.1-1.1 on GA media
These are all security issues fixed in the libnilfs3-2.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 5.3openSUSE-SU-2026:11093-1 2 CVEs
lrzip-0.660-1.1 on GA media
These are all security issues fixed in the lrzip-0.660-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 6.5openSUSE-SU-2026:11092-1 3 CVEs
libtar-1.2.20-3.1 on GA media
These are all security issues fixed in the libtar-1.2.20-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 4.3openSUSE-SU-2026:11086-1 1 CVE
ghc-xml-conduit-1.10.1.0-2.1 on GA media
These are all security issues fixed in the ghc-xml-conduit-1.10.1.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 5.5SUSE-SU-2026:2584-1 4 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues - CVE-2021-34334: DoS due to integer overflow in loop counter (bsc#1189338). - CVE-2026-25884: out-of-bounds read in `CrwMap: decode0x0805` (bsc#1259083). - CVE-2026-27596: integer overflow in `LoaderNative: ge…
first Jun 23, 2026 -
Medium max 4.7SUSE-SU-2026:2492-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:2485-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 4.3SUSE-SU-2026:22230-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
Medium max 6.9openSUSE-SU-2026:11113-1 1 CVE
python311-pypdf-6.14.0-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Medium max 6.9openSUSE-SU-2026:11101-1 5 CVEs
python315-3.15.0~b2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~b2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 4.0openSUSE-SU-2026:11069-1 1 CVE
squid-7.6-1.1 on GA media
These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Medium max 5.3openSUSE-SU-2026:11067-1 1 CVE
python311-joserfc-1.7.1-1.1 on GA media
These are all security issues fixed in the python311-joserfc-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Medium max 5.9first Jun 18, 2026
-
Medium max 6.8SUSE-SU-2026:2441-1 1 CVE
Security update for rustup
This update for rustup fixes the following issues - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257902). - rust-shlex: Multiple issues involving quote API (RUSTSEC-2024-0006, GHSA-r7qv-8r…
first Jun 18, 2026 -
Medium max 4.3SUSE-SU-2026:22135-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 15, 2026 -
Medium max 5.0SUSE-SU-2026:22139-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to …
first Jun 16, 2026 -
Medium max 5.9openSUSE-SU-2026:11051-1 2 CVEs
weblate-5.17.1-2.1 on GA media
These are all security issues fixed in the weblate-5.17.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Medium max 5.1openSUSE-SU-2026:11049-1 3 CVEs
liburiparser1-1.0.2-1.1 on GA media
These are all security issues fixed in the liburiparser1-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Medium max 5.3SUSE-SU-2026:2429-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/build…
first Jun 17, 2026 -
Medium max 5.5SUSE-SU-2026:22121-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-4367: out-of-bounds read in `xpmNextWord()` (bsc#1260928).
first Jun 11, 2026 -
Medium max 6.6SUSE-SU-2026:22118-1 1 CVE
Security update for python-python-dotenv
This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewriting `.env` files, allowing a local attacker to overwrite arbitrary files …
first Jun 11, 2026 -
Medium max 5.0SUSE-SU-2026:22103-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to …
first Jun 15, 2026