6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2026:20730-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue: Update to freetype2 2.14.2: - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). Changelog: * Several changes related to LCD filtering are implemented to achiev…
first Mar 16, 2026 -
Medium max 5.3SUSE-SU-2026:20726-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue: Update to freetype2 2.14.2: - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). Changelog: * Several changes related to LCD filtering are implemented to achiev…
first Mar 16, 2026 -
Medium max 5.8SUSE-SU-2026:20727-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
first Mar 13, 2026 -
Medium max 4.3SUSE-SU-2026:0960-1 2 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-28295: information disclosure when processing untrusted PASV responses from FTP servers (bsc#1258953). - CVE-2026-28296: arbitrary FTP command injection due to unsanitized CRLF sequences in user supp…
first Mar 23, 2026 -
Medium max 5.7SUSE-SU-2026:0971-1 1 CVE
Security update for python39
This update for python39 fixes the following issue: - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
first Mar 23, 2026 -
Medium max 5.1openSUSE-SU-2026:10402-1 1 CVE
python311-PyPDF2-2.11.1-8.1 on GA media
These are all security issues fixed in the python311-PyPDF2-2.11.1-8.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
Medium max 6.9openSUSE-SU-2026:10399-1 1 CVE
GraphicsMagick-1.3.46-4.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
Medium max 5.7openSUSE-SU-2026:10405-1 1 CVE
python314-3.14.3-3.1 on GA media
These are all security issues fixed in the python314-3.14.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
Medium max 6.0openSUSE-SU-2026:10404-1 2 CVEs
python310-3.10.20-2.1 on GA media
These are all security issues fixed in the python310-3.10.20-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
Medium max 5.1openSUSE-SU-2026:10403-1 1 CVE
python311-pypdf-6.9.1-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 22, 2026 -
Medium max 6.8openSUSE-SU-2026:20364-1 3 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. (bsc#1257908)
first Mar 16, 2026 -
Medium max 6.5openSUSE-SU-2026:20357-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Update to version 10.0.8 - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)
first Mar 13, 2026 -
Medium max 5.3openSUSE-SU-2026:20327-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - Update to version 3.19.1: * CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents (bsc#1251442) * CVE-2025-58190: golang.org/x/net/html: Fixed x…
first Mar 5, 2026 -
Medium max 6.8openSUSE-SU-2026:20326-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
first Mar 5, 2026 -
Medium max 5.3openSUSE-SU-2026:20318-1 2 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.12.0: * New Features - Add tea actions commands for managing workflow runs and workflows in #880, #796 - Add tea api subcommand for arbitrary API calls not covered by ex…
first Mar 3, 2026 -
Medium max 6.9openSUSE-SU-2026:20306-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
Medium max 5.5openSUSE-SU-2026:20297-1 1 CVE
Security update for rhino
This update for rhino fixes the following issues: Update to 1.7.15.1: - CVE-2025-66453: Fixed a problem with formatting of floating-point numbers to strings that may result in DoS (bsc#1254481).
first Mar 2, 2026 -
Medium max 4.8openSUSE-SU-2026:20290-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
Medium max 5.5openSUSE-SU-2026:20273-1 2 CVEs
Security update for 7zip
This update for 7zip fixes the following issues: - Update to 25.01 (boo#1249130) * The code for handling symbolic links has been changed to provide greater security when extracting files from archives * Command line switch -snld20 can be used to bypass defaul…
first Feb 26, 2026 -
Medium max 5.7openSUSE-SU-2026:20257-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2025-68158: Fixed 1-click account takeover in applications that use the Authlib library (bsc#1256414)
first Feb 19, 2026 -
Medium max 6.0openSUSE-SU-2026:20254-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
Medium max 6.9openSUSE-SU-2026:20251-1 2 CVEs
Security update for cockpit-repos
This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325). - CVE-2025-64718: js-y…
first Feb 18, 2026 -
Medium max 5.3openSUSE-SU-2026:20249-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).
first Feb 18, 2026 -
Medium max 6.8openSUSE-SU-2026:20245-1 1 CVE
Security update for wicked2nm
This update for wicked2nm fixes the following issues: - Update to version 1.4.1 - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908).
first Feb 17, 2026 -
Medium max 6.9openSUSE-SU-2026:20244-1 1 CVE
Security update for cockpit-machines, cockpit
This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324) Changes in cockpit-machines: - Update to 346 * 346 - Performance improvements - Translation updat…
first Feb 17, 2026 -
Medium max 6.8openSUSE-SU-2026:20233-1 2 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues: Upgrade openCryptoki to 3.26 (jsc#PED-14609) Security fixes: - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673). - CVE-2026-238…
first Feb 13, 2026 -
Medium max 5.3openSUSE-SU-2026:20206-1 2 CVEs
Security update for kepler
This update for kepler fixes the following issues: Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251427). - CVE-2025-58190: golang.org…
first Feb 13, 2026 -
Medium max 4.3openSUSE-SU-2026:20203-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Feb 11, 2026 -
Medium max 6.9openSUSE-SU-2026:20185-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325).
first Feb 6, 2026 -
Medium max 5.4openSUSE-SU-2026:20150-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Medium max 6.5openSUSE-SU-2026:20148-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
Medium max 6.3openSUSE-SU-2026:20144-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 30, 2026 -
Medium max 5.7openSUSE-SU-2026:20139-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).
first Jan 30, 2026 -
Medium max 5.3openSUSE-SU-2026:20138-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range check…
first Jan 30, 2026 -
Medium max 4.6openSUSE-SU-2026:20137-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
first Jan 29, 2026 -
Medium max 5.9openSUSE-SU-2026:20130-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming…
first Jan 29, 2026 -
Medium max 6.9openSUSE-SU-2026:20122-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737)
first Jan 28, 2026 -
Medium max 6.3openSUSE-SU-2026:20119-1 1 CVE
Security update for python-FontTools
This update for python-FontTools fixes the following issues: - CVE-2025-66034: Fixed arbitrary file write vulnerability that could lead to remote code execution (bsc#1254366).
first Jan 28, 2026 -
Medium max 5.3openSUSE-SU-2026:20117-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: Update to version 12.1: - CVE-2025-64718: js-yaml: fixed prototype pollution in merge (bsc#1255425).
first Jan 27, 2026 -
Medium max 6.5openSUSE-SU-2026:20110-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 26, 2026