6,765 results · Clear filters · Feed
-
Medium max 5.4SUSE-SU-2026:0910-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1…
first Apr 7, 2026 -
Medium max 6.3openSUSE-SU-2026:10499-1 1 CVE
python311-social-auth-app-django-5.7.0-1.1 on GA media
These are all security issues fixed in the python311-social-auth-app-django-5.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
Medium max 5.1openSUSE-SU-2026:10496-1 1 CVE
git-cliff-2.12.0-1.1 on GA media
These are all security issues fixed in the git-cliff-2.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
Medium max 6.5SUSE-SU-2026:1191-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 6, 2026 -
Medium max 5.3openSUSE-SU-2026:10485-1 3 CVEs
python311-Flask-Cors-6.0.2-1.1 on GA media
These are all security issues fixed in the python311-Flask-Cors-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2026 -
Medium max 6.3openSUSE-SU-2026:10483-1 1 CVE
himmelblau-2.3.9+git0.a9fd29b-1.1 on GA media
These are all security issues fixed in the himmelblau-2.3.9+git0.a9fd29b-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2026 -
Medium max 4.3openSUSE-SU-2026:20451-1 2 CVEs
Security update for gnome-online-accounts, gvfs
This update for gnome-online-accounts, gvfs fixes the following issues: Changes for gvfs: Update gvfs to 1.59.90: - CVE-2026-28295: information disclosure when processing untrusted PASV responses from FTP servers (bsc#1258953). - CVE-2026-28296: arbitrary FTP…
first Mar 31, 2026 -
Medium max 5.9openSUSE-SU-2026:20449-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Security fixes: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected …
first Mar 30, 2026 -
Medium max 4.0openSUSE-SU-2026:20448-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 30, 2026 -
Medium max 5.3openSUSE-SU-2026:20446-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Medium max 6.9openSUSE-SU-2026:20441-1 3 CVEs
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786). - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#12…
first Mar 27, 2026 -
Medium max 6.6openSUSE-SU-2026:20437-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
Medium max 5.9openSUSE-SU-2026:20432-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: Fixed denial of service (bsc#1251194)
first Mar 26, 2026 -
Medium max 4.1SUSE-SU-2026:1177-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 2, 2026 -
Medium max 6.9SUSE-SU-2026:1174-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 2, 2026 -
Medium max 4.0SUSE-SU-2026:1166-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Apr 2, 2026 -
Medium max 4.8SUSE-SU-2026:1179-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Apr 2, 2026 -
Medium max 6.9SUSE-SU-2026:1173-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 2, 2026 -
Medium max 6.5SUSE-SU-2026:20910-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
first Mar 19, 2026 -
Medium max 5.9SUSE-SU-2026:20904-1 9 CVEs
Security update for cosign
This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates (bsc#1258542) - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize r…
first Mar 18, 2026 -
Medium max 6.6SUSE-SU-2026:20948-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
Medium max 6.6SUSE-SU-2026:20940-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
Medium max 5.9SUSE-SU-2026:20935-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: Fixed denial of service (bsc#1251194)
first Mar 26, 2026 -
Medium max 5.5SUSE-SU-2026:20933-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Mar 25, 2026 -
Medium max 5.3SUSE-SU-2026:20932-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - Updated to version 7.1.2: * avcodec/librsvgdec: fix compilation with librsvg 2.50.3 * libavfilter/af_firequalizer: Add check for av_malloc_array() * avcodec/libsvtav1: unbreak build with latest svtav1 * a…
first Mar 25, 2026 -
Medium max 5.5SUSE-SU-2026:20923-1 9 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870). - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntries…
first Mar 23, 2026 -
Medium max 5.3SUSE-SU-2026:20922-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
Medium max 5.4SUSE-SU-2026:20916-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
Medium max 5.7openSUSE-SU-2026:10475-1 5 CVEs
opensc-0.27.1-1.1 on GA media
These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
Medium max 5.3openSUSE-SU-2026:10473-1 4 CVEs
dnsdist-2.0.3-1.1 on GA media
These are all security issues fixed in the dnsdist-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
Medium max 5.3openSUSE-SU-2026:10468-1 1 CVE
python311-ecdsa-0.19.2-1.1 on GA media
These are all security issues fixed in the python311-ecdsa-0.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 31, 2026 -
Medium max 4.0openSUSE-SU-2026:10466-1 3 CVEs
expat-2.7.5-1.1 on GA media
These are all security issues fixed in the expat-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 31, 2026 -
Medium max 5.1openSUSE-SU-2026:10465-1 2 CVEs
ImageMagick-7.1.2.18-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.18-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 31, 2026 -
Medium max 4.0SUSE-SU-2026:1159-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 31, 2026 -
Medium max 6.9SUSE-SU-2026:1154-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue: - CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl (bsc#1233785).
first Mar 31, 2026 -
Medium max 4.0SUSE-SU-2026:1137-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 28, 2026 -
Medium max 4.6openSUSE-SU-2026:10464-1 1 CVE
python311-pypdf-6.9.2-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.9.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 30, 2026 -
Medium max 6.1openSUSE-SU-2026:10461-1 1 CVE
python311-nltk-3.9.4-1.1 on GA media
These are all security issues fixed in the python311-nltk-3.9.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 29, 2026 -
Medium max 5.5openSUSE-SU-2026:20421-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Mar 25, 2026 -
Medium max 5.3openSUSE-SU-2026:20420-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - Updated to version 7.1.2: * avcodec/librsvgdec: fix compilation with librsvg 2.50.3 * libavfilter/af_firequalizer: Add check for av_malloc_array() * avcodec/libsvtav1: unbreak build with latest svtav1 * a…
first Mar 25, 2026