6,765 results · Clear filters · Feed
-
Medium max 5.5openSUSE-SU-2026:10608-1 1 CVE
libXpm-devel-3.5.18-2.1 on GA media
These are all security issues fixed in the libXpm-devel-3.5.18-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 23, 2026 -
Medium max 4.0SUSE-SU-2026:1568-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issue: - CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization (bsc#1262103).
first Apr 23, 2026 -
Medium max 6.5SUSE-SU-2026:1565-1 6 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Apr 23, 2026 -
Medium max 4.5openSUSE-SU-2026:20592-1 6 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355). - CVE-2025-59799: a large size value can cause…
first Apr 21, 2026 -
Medium max 5.9SUSE-FU-2026:21232-1 1 CVE
Feature update for libgcrypt, libgpg-error
This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…
first Apr 17, 2026 -
Medium max 5.1SUSE-SU-2026:21239-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).
first Apr 21, 2026 -
Medium max 4.0openSUSE-SU-2026:20591-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: out-of-bounds write of a zero byte in the X11 `display` interaction path can lead to a crash (bsc#1260874).
first Apr 21, 2026 -
Medium max 5.1openSUSE-SU-2026:20593-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).
first Apr 21, 2026 -
Medium max 5.0openSUSE-SU-2026:10600-1 1 CVE
csync2-2.0+git.1600444747.83b3644-3.1 on GA media
These are all security issues fixed in the csync2-2.0+git.1600444747.83b3644-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
Medium max 6.1openSUSE-SU-2026:10599-1 1 CVE
cacti-1.2.30+git306.82d5aef5-1.1 on GA media
These are all security issues fixed in the cacti-1.2.30+git306.82d5aef5-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
Medium max 6.5openSUSE-SU-2026:20576-1 1 CVE
Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens (bsc#1261355)
first Apr 13, 2026 -
Medium max 6.9openSUSE-SU-2026:20552-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 16, 2026 -
Medium max 4.7openSUSE-SU-2026:20533-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
Medium max 6.9openSUSE-SU-2026:20512-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
Medium max 6.1openSUSE-SU-2026:20497-1 1 CVE
Security update for python-gi-docgen
This update for python-gi-docgen fixes the following issues: - CVE-2025-11687: Fixed reflected DOM XSS (bsc#1251961)
first Apr 9, 2026 -
Medium max 6.9SUSE-SU-2026:21206-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 16, 2026 -
Medium max 6.1openSUSE-SU-2026:20495-1 2 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in …
first Apr 9, 2026 -
Medium max 4.7SUSE-SU-2026:21192-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
Medium max 5.3openSUSE-SU-2026:20499-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 9, 2026 -
Medium max 6.5openSUSE-SU-2026:20480-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: use Crypt:URandom for generating nonces (bsc#1246623)
first Apr 9, 2026 -
Medium max 5.3openSUSE-SU-2026:20479-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Apr 20, 2026 -
Medium max 6.9SUSE-SU-2026:21172-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
Medium max 5.9openSUSE-FU-2026:20562-1 1 CVE
Feature update for libgcrypt, libgpg-error
This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…
first Apr 17, 2026 -
Medium max 5.3SUSE-SU-2026:21161-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 9, 2026 -
Medium max 6.1SUSE-SU-2026:21159-1 1 CVE
Security update for python-gi-docgen
This update for python-gi-docgen fixes the following issues: - CVE-2025-11687: Fixed reflected DOM XSS (bsc#1251961)
first Apr 9, 2026 -
Medium max 6.1SUSE-SU-2026:21158-1 2 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in …
first Apr 9, 2026 -
Medium max 4.1SUSE-SU-2026:21143-1 1 CVE
Security update for tar
This update for tar fixes the following issue: Security issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Non security issue: - Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
first Apr 7, 2026 -
Medium max 6.5SUSE-SU-2026:21145-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: use Crypt:URandom for generating nonces (bsc#1246623)
first Apr 9, 2026 -
Medium max 6.7SUSE-SU-2026:21144-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Medium max 6.5openSUSE-SU-2026:20536-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
first Apr 14, 2026 -
Medium max 5.9openSUSE-SU-2026:20566-1 1 CVE
Security update for Botan
This update for Botan fixes the following issue: - CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates (bsc#1261993).
first Apr 20, 2026 -
Medium max 5.9SUSE-FU-2026:21213-1 1 CVE
Feature update for libgcrypt, libgpg-error
This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…
first Apr 17, 2026 -
Medium max 6.8openSUSE-SU-2026:10593-1 1 CVE
openCryptoki-3.26.0-6.1 on GA media
These are all security issues fixed in the openCryptoki-3.26.0-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 6.3openSUSE-SU-2026:10588-1 1 CVE
capnproto-1.4.0-2.1 on GA media
These are all security issues fixed in the capnproto-1.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 4.0openSUSE-SU-2026:10585-1 1 CVE
GraphicsMagick-1.3.46-6.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 5.3openSUSE-SU-2026:10597-1 1 CVE
python311-python-multipart-0.0.26-1.1 on GA media
These are all security issues fixed in the python311-python-multipart-0.0.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 6.5openSUSE-SU-2026:10589-1 7 CVEs
cups-2.4.17-1.1 on GA media
These are all security issues fixed in the cups-2.4.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 4.0SUSE-SU-2026:1504-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).
first Apr 20, 2026 -
Medium max 6.0SUSE-SU-2026:1503-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970).
first Apr 20, 2026 -
Medium max 5.9SUSE-SU-2026:1482-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2026-34956: invalid memory access via crafted FTP payloads in userspace conntrack flows specifying the FTP alg handler (bsc#1261273).
first Apr 20, 2026