6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2026:1310-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
first Apr 14, 2026 -
Medium max 5.3SUSE-SU-2026:1325-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Apr 14, 2026 -
Medium max 4.0SUSE-SU-2026:21062-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Apr 7, 2026 -
Medium max 5.9SUSE-SU-2026:21064-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issues: - CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
first Apr 8, 2026 -
Medium max 4.4SUSE-SU-2026:21036-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Apr 8, 2026 -
Medium max 5.5SUSE-SU-2026:21032-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 7, 2026 -
Medium max 5.9SUSE-SU-2026:21035-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issues: - CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
first Apr 8, 2026 -
Medium max 4.0SUSE-SU-2026:21031-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Apr 7, 2026 -
Medium max 6.1SUSE-SU-2026:21016-1 2 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in …
first Apr 9, 2026 -
Medium max 5.3SUSE-SU-2026:21018-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 9, 2026 -
Medium max 4.1SUSE-SU-2026:21002-1 1 CVE
Security update for tar
This update for tar fixes the following issue: Security issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Non security issue: - Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
first Apr 7, 2026 -
Medium max 6.7SUSE-SU-2026:21003-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Medium max 4.4SUSE-SU-2026:21063-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Apr 8, 2026 -
Medium max 6.9SUSE-SU-2026:1300-1 2 CVEs
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read (bsc#1258765). - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
first Apr 13, 2026 -
Medium max 4.9openSUSE-SU-2026:10537-1 1 CVE
python311-biopython-1.87-1.1 on GA media
These are all security issues fixed in the python311-biopython-1.87-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 12, 2026 -
Medium max 6.7openSUSE-SU-2026:10536-1 1 CVE
libcap-devel-2.78-1.1 on GA media
These are all security issues fixed in the libcap-devel-2.78-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 12, 2026 -
Medium max 5.9openSUSE-SU-2026:10534-1 1 CVE
libopenvswitch-3_7-0-3.7.1-33.1 on GA media
These are all security issues fixed in the libopenvswitch-3_7-0-3.7.1-33.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2026 -
Medium max 6.9openSUSE-SU-2026:10535-1 1 CVE
python311-cryptography-46.0.7-1.1 on GA media
These are all security issues fixed in the python311-cryptography-46.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2026 -
Medium max 4.8openSUSE-SU-2026:10532-1 1 CVE
helm3-3.20.2-1.1 on GA media
These are all security issues fixed in the helm3-3.20.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2026 -
Medium max 4.0SUSE-SU-2026:20985-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 30, 2026 -
Medium max 4.3SUSE-SU-2026:20988-1 2 CVEs
Security update for gnome-online-accounts, gvfs
This update for gnome-online-accounts, gvfs fixes the following issues: Changes for gvfs: Update gvfs to 1.59.90: - CVE-2026-28295: information disclosure when processing untrusted PASV responses from FTP servers (bsc#1258953). - CVE-2026-28296: arbitrary FTP…
first Mar 31, 2026 -
Medium max 6.7openSUSE-SU-2026:20471-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Medium max 4.1openSUSE-SU-2026:20472-1 1 CVE
Security update for tar
This update for tar fixes the following issue: Security issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Non security issue: - Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
first Apr 7, 2026 -
Medium max 5.9SUSE-SU-2026:20986-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Security fixes: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected …
first Mar 30, 2026 -
Medium max 5.3SUSE-SU-2026:20984-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Medium max 5.7openSUSE-SU-2026:10522-1 2 CVEs
python315-3.15.0~a8-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~a8-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
Medium max 6.5openSUSE-SU-2026:10518-1 1 CVE
python311-Flask-HTTPAuth-4.8.1-1.1 on GA media
These are all security issues fixed in the python311-Flask-HTTPAuth-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
Medium max 4.7SUSE-RU-2026:1228-1 2 CVEs
Recommended update for shadow
This update for shadow fixes the following issues: shadow is updated to 4.17.2 to bring lots of features and bug fixes. - util-linux-2.41 introduced new variable: LOGIN_ENV_SAFELIST. Recognize it and update dependencies. - Set SYS_{UID,GID}_MIN to 201: After …
first Apr 9, 2026 -
Medium max 5.5SUSE-SU-2026:20969-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 7, 2026 -
Medium max 5.3SUSE-SU-2026:20968-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Medium max 4.0SUSE-SU-2026:20963-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 30, 2026 -
Medium max 5.3SUSE-SU-2026:20962-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Medium max 5.4SUSE-SU-2026:1051-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229). - CVE-20…
first Apr 8, 2026 -
Medium max 5.9openSUSE-SU-2026:10509-1 2 CVEs
steampipe-2.4.1-1.1 on GA media
These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
Medium max 4.4SUSE-SU-2026:1218-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Apr 8, 2026 -
Medium max 6.0SUSE-SU-2026:20951-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting (bsc#1257181). - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
first Mar 31, 2026 -
Medium max 4.1SUSE-SU-2026:20959-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 1, 2026 -
Medium max 6.0SUSE-SU-2026:20956-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting (bsc#1257181). - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
first Mar 31, 2026 -
Medium max 4.1SUSE-SU-2026:20955-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 1, 2026 -
Medium max 5.4SUSE-SU-2026:1095-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1…
first Apr 7, 2026