6,765 results · Clear filters · Feed
-
Medium max 6.9openSUSE-SU-2026:10582-1 1 CVE
python311-PyPDF2-2.11.1-9.1 on GA media
These are all security issues fixed in the python311-PyPDF2-2.11.1-9.1 package on the GA media of openSUSE Tumbleweed.
first Apr 20, 2026 -
Medium max 4.0openSUSE-SU-2026:10581-1 1 CVE
haproxy-3.3.6+git91.af5637e93-1.1 on GA media
These are all security issues fixed in the haproxy-3.3.6+git91.af5637e93-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 20, 2026 -
Medium max 6.5SUSE-SU-2026:1483-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2025-55199: crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-35206: files written to unexpected directory via specially crafted Chart(bsc#1261938). Changes for hel…
first Apr 20, 2026 -
Medium max 6.9openSUSE-SU-2026:10583-1 1 CVE
python311-pypdf-6.10.2-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 20, 2026 -
Medium max 6.0openSUSE-SU-2026:10579-1 1 CVE
python310-3.10.20-5.1 on GA media
These are all security issues fixed in the python310-3.10.20-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 19, 2026 -
Medium max 6.0openSUSE-SU-2026:10580-1 1 CVE
python315-3.15.0~a8-2.1 on GA media
These are all security issues fixed in the python315-3.15.0~a8-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 19, 2026 -
Medium max 5.3openSUSE-SU-2026:10576-1 1 CVE
python311-jwcrypto-1.5.7-2.1 on GA media
These are all security issues fixed in the python311-jwcrypto-1.5.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
Medium max 6.2openSUSE-SU-2026:10570-1 1 CVE
aardvark-dns-1.17.1-1.1 on GA media
These are all security issues fixed in the aardvark-dns-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
Medium max 6.5SUSE-SU-2026:21117-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)
first Apr 14, 2026 -
Medium max 6.5SUSE-SU-2026:21127-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)
first Apr 14, 2026 -
Medium max 6.7SUSE-SU-2026:1433-1 1 CVE
Security update for libcap
This update for libcap fixes the following issue: - CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).
first Apr 17, 2026 -
Medium max 5.5SUSE-SU-2026:1425-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 17, 2026 -
Medium max 5.9SUSE-SU-2026:1439-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issue: Security updates: - CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). Other updates: - Update openvswitch to 3.5.4
first Apr 17, 2026 -
Medium max 5.5SUSE-SU-2026:1424-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 17, 2026 -
Medium max 5.3SUSE-SU-2026:1436-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Apr 17, 2026 -
Medium max 6.5SUSE-SU-2026:1442-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 17, 2026 -
Medium max 6.5SUSE-SU-2026:1441-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 17, 2026 -
Medium max 6.7SUSE-SU-2026:1432-1 1 CVE
Security update for libcap
This update for libcap fixes the following issue: - CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).
first Apr 17, 2026 -
Medium max 5.9SUSE-SU-2026:1440-1 1 CVE
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: - CVE-2026-34956: invalid memory access via crafted FTP payloads in userspace conntrack flows specifying the FTP alg handler (bsc#1261273).
first Apr 17, 2026 -
Medium max 4.7SUSE-SU-2026:21112-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
Medium max 6.9SUSE-SU-2026:21094-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
Medium max 5.5openSUSE-SU-2026:10559-1 1 CVE
ImageMagick-7.1.2.19-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 6.5openSUSE-SU-2026:10558-1 1 CVE
GraphicsMagick-1.3.46-5.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 5.0SUSE-SU-2026:1399-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568).
first Apr 16, 2026 -
Medium max 6.7SUSE-SU-2026:1414-1 1 CVE
Security update for shim
This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…
first Apr 16, 2026 -
Medium max 5.1openSUSE-SU-2026:10564-1 1 CVE
libpng16-16-1.6.57-1.1 on GA media
These are all security issues fixed in the libpng16-16-1.6.57-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 6.3openSUSE-SU-2026:10566-1 1 CVE
liblog4cxx-devel-1.7.0-2.1 on GA media
These are all security issues fixed in the liblog4cxx-devel-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 5.9openSUSE-SU-2026:10563-1 1 CVE
leancrypto-devel-1.7.2-1.1 on GA media
These are all security issues fixed in the leancrypto-devel-1.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 5.3SUSE-SU-2026:1413-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 16, 2026 -
Medium max 5.9SUSE-SU-2026:1388-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issues: - CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528)
first Apr 16, 2026 -
Medium max 4.3openSUSE-SU-2026:10550-1 2 CVEs
apache-pdfbox-2.0.36-1.1 on GA media
These are all security issues fixed in the apache-pdfbox-2.0.36-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026 -
Medium max 6.5SUSE-SU-2026:1344-1 6 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-0964: SCP protocol path traversal in `ssh_scp_pull_request()` (bsc#1258049). - CVE-2026-0965:…
first Apr 15, 2026 -
Medium max 5.1SUSE-SU-2026:1338-1 1 CVE
Security update for giflib
This update for giflib fixes the following issue: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).
first Apr 15, 2026 -
Medium max 6.5SUSE-SU-2026:1356-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issue: Security fixes: - CVE-2025-12801: rpc.mountd allows a NFSv3 client to escalate their privileges and access subdirectories and subtrees of an exported directory (bsc#1259204). Other fixes: - Split from nfs-u…
first Apr 15, 2026 -
Medium max 4.0SUSE-SU-2026:1352-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Apr 15, 2026 -
Medium max 6.2openSUSE-SU-2026:10546-1 1 CVE
python311-rfc3161-client-1.0.6-1.1 on GA media
These are all security issues fixed in the python311-rfc3161-client-1.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.6openSUSE-SU-2026:10545-1 2 CVEs
python311-aiohttp-3.13.5-3.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.13.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.9openSUSE-SU-2026:10544-1 4 CVEs
log4j-2.20.0-2.1 on GA media
These are all security issues fixed in the log4j-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.2openSUSE-SU-2026:10543-1 3 CVEs
kubo-0.40.1-1.1 on GA media
These are all security issues fixed in the kubo-0.40.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 5.3SUSE-SU-2026:1324-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259207). Non securi…
first Apr 14, 2026