6,765 results · Clear filters · Feed
-
Medium max 5.3openSUSE-SU-2026:20409-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
Medium max 5.4openSUSE-SU-2026:20403-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
Medium max 5.5openSUSE-SU-2026:20410-1 9 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870). - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntries…
first Mar 23, 2026 -
Medium max 6.5openSUSE-SU-2026:20396-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
first Mar 19, 2026 -
Medium max 5.3openSUSE-SU-2026:10452-1 1 CVE
libjavamapscript-8.6.1-1.1 on GA media
These are all security issues fixed in the libjavamapscript-8.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2026 -
Medium max 6.9SUSE-SU-2026:1124-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Mar 27, 2026 -
Medium max 4.4openSUSE-SU-2026:10455-1 1 CVE
python311-requests-2.33.0-1.1 on GA media
These are all security issues fixed in the python311-requests-2.33.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2026 -
Medium max 6.7openSUSE-SU-2026:10453-1 2 CVEs
libpolkit-agent-1-0-127-3.1 on GA media
These are all security issues fixed in the libpolkit-agent-1-0-127-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2026 -
Medium max 5.3openSUSE-SU-2026:10446-1 1 CVE
ImageMagick-7.1.2.18-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2026 -
Medium max 4.8SUSE-SU-2026:20868-1 2 CVEs
Security update for capstone
This update for capstone fixes the following issues: - CVE-2025-67873: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow (bsc#1255309). - CVE-2025-68114: Unchecked vsnprintf return in SStream_concat allows stack buffer overflow (bsc#125531…
first Mar 25, 2026 -
Medium max 6.0SUSE-SU-2026:1090-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181).
first Mar 26, 2026 -
Medium max 6.7SUSE-SU-2026:20826-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 24, 2026 -
Medium max 6.7SUSE-SU-2026:1040-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 25, 2026 -
Medium max 6.6SUSE-SU-2026:1066-1 3 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-49761: ReDoS vulnerability in REXML gem (bsc#1232440 bsc#1232441). - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016). - CVE-2026-27820: insuff…
first Mar 26, 2026 -
Medium max 6.7SUSE-SU-2026:1061-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 26, 2026 -
Medium max 6.9openSUSE-SU-2026:10433-1 2 CVEs
LibVNCServer-devel-0.9.15-2.1 on GA media
These are all security issues fixed in the LibVNCServer-devel-0.9.15-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
Medium max 5.9openSUSE-SU-2026:20386-1 9 CVEs
Security update for cosign
This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates (bsc#1258542) - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize r…
first Mar 18, 2026 -
Medium max 6.8openSUSE-SU-2026:20380-1 1 CVE
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927). - Update to version 0.10.0 (bsc#1257877): * chore: updating tool version to 0.1…
first Mar 17, 2026 -
Medium max 6.8openSUSE-SU-2026:20377-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257918).
first Mar 17, 2026 -
Medium max 6.7SUSE-SU-2026:20822-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd…
first Mar 24, 2026 -
Medium max 5.9SUSE-SU-2026:20194-1 2 CVEs
Security update for postgresql17 and postgresql18
This update for postgresql17 and postgresql18 fixes the following issues: Changes in postgresql17, postgresql18: Update to 17.7: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/17.7/ * bsc#1253332, CVE-2025-12817: Mis…
first Mar 18, 2026 -
Medium max 5.5openSUSE-SU-2026:10422-1 1 CVE
libtpms-devel-0.10.2-1.1 on GA media
These are all security issues fixed in the libtpms-devel-0.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
Medium max 5.3SUSE-SU-2026:1011-1 1 CVE
Security update 5.0.7 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization and update golang-github-boynux-squid_exporter: - Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes (j…
first Mar 25, 2026 -
Medium max 5.1SUSE-SU-2026:1005-1 2 CVEs
Security update for giflib
This update for giflib fixes the following issues: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).
first Mar 25, 2026 -
Medium max 4.8SUSE-SU-2026:1004-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 25, 2026 -
Medium max 5.3SUSE-SU-2026:20769-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Mar 20, 2026 -
Medium max 6.3SUSE-SU-2026:20768-1 8 CVEs
Security update for python311
This update for python311 fixes the following issues: Updated to Python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: qua…
first Mar 20, 2026 -
Medium max 5.3SUSE-SU-2026:20767-1 1 CVE
Security update for libssh
This update for libssh fixes the following issue: - CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
first Mar 19, 2026 -
Medium max 5.3SUSE-SU-2026:20762-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
Medium max 6.3SUSE-SU-2026:20796-1 8 CVEs
Security update for python311
This update for python311 fixes the following issues: Updated to Python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: qua…
first Mar 19, 2026 -
Medium max 5.9openSUSE-SU-2026:20131-1 2 CVEs
Security update for postgresql17 and postgresql18
This update for postgresql17 and postgresql18 fixes the following issues: Changes in postgresql17, postgresql18: Update to 17.7: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/17.7/ * bsc#1253332, CVE-2025-12817: Mis…
first Mar 18, 2026 -
Medium max 5.4SUSE-SU-2026:20759-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
Medium max 6.5SUSE-SU-2026:20755-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
first Mar 19, 2026 -
Medium max 6.8SUSE-SU-2026:20748-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257918).
first Mar 17, 2026 -
Medium max 6.8SUSE-SU-2026:20744-1 3 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. (bsc#1257908)
first Mar 16, 2026 -
Medium max 6.7SUSE-SU-2026:0990-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 24, 2026 -
Medium max 6.7SUSE-SU-2026:0991-1 1 CVE
Security update for systemd
This update for systemd fixes the following issue: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Ch…
first Mar 24, 2026 -
Medium max 5.4SUSE-SU-2026:20738-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229). - CVE-20…
first Mar 18, 2026 -
Medium max 4.8SUSE-SU-2026:20737-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 18, 2026 -
Medium max 4.4SUSE-SU-2026:20732-1 1 CVE
Security update for vim
This update for vim fixes the following issue: Update Vim to version 9.2.0110: - CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
first Mar 17, 2026