6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:22102-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 12, 2026 -
Medium max 6.5
python311-google-adk-2.2.0-1.1 on GA media
These are all security issues fixed in the python311-google-adk-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Medium max 6.1openSUSE-SU-2026:11041-1 1 CVE
python-WebOb-doc-1.8.10-1.1 on GA media
These are all security issues fixed in the python-WebOb-doc-1.8.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Medium max 6.7SUSE-SU-2026:0741-2 1 CVE
Security update for shim
This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…
first Jun 16, 2026 -
Medium max 6.5openSUSE-SU-2026:11040-1 1 CVE
grafana-11.6.14+security04-4.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Medium max 6.5openSUSE-SU-2026:20963-1 6 CVEs
Security update for neonmodem
This update for neonmodem fixes the following issues: Changes in neonmodem: - Update golang.org/x/net dependency to v0.55.0 due to bsc#1267193 - Update golang.org/x/image dependency to v0.38.0 due to bsc#1260727 - Update golang.org/x/term dependency to v0.42.…
first Jun 12, 2026 -
Medium max 5.5openSUSE-SU-2026:20953-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-4367: out-of-bounds read in `xpmNextWord()` (bsc#1260928).
first Jun 11, 2026 -
Medium max 6.6openSUSE-SU-2026:20952-1 1 CVE
Security update for python-python-dotenv
This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewriting `.env` files, allowing a local attacker to overwrite arbitrary files …
first Jun 11, 2026 -
Medium max 5.5SUSE-SU-2026:22090-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Jun 8, 2026 -
Medium max 5.5openSUSE-SU-2026:20961-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).
first Jun 12, 2026 -
Medium max 6.8SUSE-SU-2026:22096-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jun 10, 2026 -
Medium max 4.4SUSE-SU-2026:22091-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026 -
Medium max 4.3SUSE-SU-2026:22088-1 2 CVEs
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: - CVE-2026-33929: path traversal in the `ExtractEmbeddedFiles` example code can lead to arbitrary file writes (bsc#1262046). Other updates and bugfixes:…
first Jun 8, 2026 -
Medium max 6.3openSUSE-SU-2026:11037-1 2 CVEs
quickjs-20260604-1.1 on GA media
These are all security issues fixed in the quickjs-20260604-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 5.3openSUSE-SU-2026:11036-1 1 CVE
python311-zeroconf-0.149.16-1.1 on GA media
These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 6.9openSUSE-SU-2026:11035-1 1 CVE
python311-aiosmtplib-5.1.1-1.1 on GA media
These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 5.1openSUSE-SU-2026:11030-1 1 CVE
crun-1.28-1.1 on GA media
These are all security issues fixed in the crun-1.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 5.0openSUSE-SU-2026:11022-1 2 CVEs
opensc-0.27.1-2.1 on GA media
These are all security issues fixed in the opensc-0.27.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Medium max 6.5
python311-starlette-1.2.0-1.1 on GA media
These are all security issues fixed in the python311-starlette-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Medium max 4.8openSUSE-SU-2026:20942-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update apptainer to version v1.5.1 * Security fix (bsc#1267982): Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path matching for limit container paths directive. This is o…
first Jun 10, 2026 -
Medium max 6.8openSUSE-SU-2026:20934-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jun 10, 2026 -
Medium max 5.9SUSE-SU-2026:22068-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issue - CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).
first Jun 4, 2026 -
Medium max 6.5SUSE-SU-2026:22064-1 1 CVE
Security update for libzypp
This update for libzypp fixes the following issue Update to 17.38.13 (35): - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks (bsc#1267874).
first Jun 9, 2026 -
Medium max 5.3SUSE-SU-2026:22071-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 5, 2026 -
Medium max 4.0SUSE-SU-2026:22070-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jun 5, 2026 -
Medium max 5.3SUSE-SU-2026:22061-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 5, 2026 -
Medium max 5.5SUSE-SU-2026:22060-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 4, 2026 -
Medium max 5.5SUSE-SU-2026:2389-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).
first Jun 12, 2026 -
Medium max 6.5openSUSE-SU-2026:11013-1 2 CVEs
grafana-11.6.14+security04-3.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Medium max 4.3openSUSE-SU-2026:11010-1 1 CVE
glib-networking-2.80.1-3.1 on GA media
These are all security issues fixed in the glib-networking-2.80.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Medium max 4.8openSUSE-SU-2026:10993-1 1 CVE
apptainer-1.5.1-1.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Medium max 6.5openSUSE-SU-2026:10996-1 1 CVE
git-bug-0.10.1-6.1 on GA media
These are all security issues fixed in the git-bug-0.10.1-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Medium max 4.5openSUSE-SU-2026:11006-1 1 CVE
tmux-3.6b-2.1 on GA media
These are all security issues fixed in the tmux-3.6b-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 11, 2026 -
Medium max 4.3SUSE-SU-2026:2365-1 1 CVE
Security update for cosign
This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Changes for cosign: - update to 3.0.6: * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6…
first Jun 11, 2026 -
Medium max 6.8SUSE-SU-2026:2355-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).
first Jun 10, 2026 -
Medium max 4.3openSUSE-SU-2026:20923-1 2 CVEs
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: - CVE-2026-33929: path traversal in the `ExtractEmbeddedFiles` example code can lead to arbitrary file writes (bsc#1262046). Other updates and bugfixes:…
first Jun 8, 2026 -
Medium max 5.5openSUSE-SU-2026:10987-1 1 CVE
perl-Git-Repository-1.326.0-1.1 on GA media
These are all security issues fixed in the perl-Git-Repository-1.326.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
Medium max 5.3SUSE-SU-2026:2314-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). - CVE-2026-4271: use-after-free in the HTTP/2 server when user signal handlers disconnect connections during call…
first Jun 9, 2026 -
Medium max 4.4SUSE-SU-2026:22055-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026 -
Medium max 4.4openSUSE-SU-2026:20926-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026