6,753 results · Clear filters · Feed
-
Medium max 6.8openSUSE-SU-2026:22153-1 1 CVE
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
first Oct 21, 2026 -
Medium max 5.4openSUSE-SU-2026:22159-1 1 CVE
Security update for mozilla-nss, MozillaFirefox
This update for mozilla-nss, MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385): - CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State compo…
first Oct 23, 2026 -
Medium max 6.8openSUSE-SU-2026:12247-1 1 CVE
nano-9.3-1.1 on GA media
These are all security issues fixed in the nano-9.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.5openSUSE-SU-2026:12244-1 2 CVEs
libtirpc-devel-1.3.8-1.1 on GA media
These are all security issues fixed in the libtirpc-devel-1.3.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.8openSUSE-SU-2026:12239-1 1 CVE
go1.27-1.27.3-1.1 on GA media
These are all security issues fixed in the go1.27-1.27.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.8openSUSE-SU-2026:12238-1 1 CVE
gitoxide-0.61.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.61.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.8openSUSE-SU-2026:12236-1 1 CVE
docker-compose-5.6.1-1.1 on GA media
These are all security issues fixed in the docker-compose-5.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.8openSUSE-SU-2026:12233-1 1 CVE
ca-certificates-mozilla-2.92-2.1 on GA media
These are all security issues fixed in the ca-certificates-mozilla-2.92-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.1openSUSE-SU-2026:12249-1 1 CVE
libopenscap33-1.4.6-1.1 on GA media
These are all security issues fixed in the libopenscap33-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
Medium max 6.1openSUSE-SU-2026:22165-1 4 CVEs
Security update for libmodplug
This update for libmodplug fixes the following issues: Changes in libmodplug: - CVE-2026-108577: This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumptio…
first Oct 23, 2026 -
Medium max 6.8SUSE-SU-2026:4847-1 1 CVE
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1
-
Medium max 6.8SUSE-SU-2026:4820-1 1 CVE
Security update for openssl-certs
This update for openssl-certs fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1
-
Medium max 5.3openSUSE-SU-2026:22149-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Oct 21, 2026 -
Medium max 4.6openSUSE-SU-2026:22147-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698).
first Oct 21, 2026 -
Medium max 6.8openSUSE-SU-2026:12226-1 1 CVE
gotosocial-0.22.3-1.1 on GA media
These are all security issues fixed in the gotosocial-0.22.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Medium max 4.6SUSE-SU-2026:24268-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698).
first Oct 21, 2026 -
Medium max 5.3SUSE-SU-2026:24267-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Oct 21, 2026 -
Medium max 5.9SUSE-SU-2026:24258-1 2 CVEs
Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399).…
first Oct 16, 2026 -
Medium max 6.2SUSE-SU-2026:24255-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
Medium max 6.8SUSE-SU-2026:4863-1 1 CVE
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
first Oct 22, 2026 -
Medium max 6.5openSUSE-SU-2026:12223-1 2 CVEs
stgit-2.7.0-1.1 on GA media
These are all security issues fixed in the stgit-2.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.8openSUSE-SU-2026:12220-1 1 CVE
regclient-0.11.7-1.1 on GA media
These are all security issues fixed in the regclient-0.11.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.1openSUSE-SU-2026:12215-1 4 CVEs
libmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 on GA media
These are all security issues fixed in the libmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 5.4openSUSE-SU-2026:12211-1 1 CVE
firefox-esr-153.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 5.3openSUSE-SU-2026:12210-1 1 CVE
cramfs-tools-2.2-1.1 on GA media
These are all security issues fixed in the cramfs-tools-2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.3SUSE-SU-2026:4832-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 21, 2026 -
Medium max 6.1SUSE-SU-2026:4845-1 1 CVE
Security update for tiff
This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough (bsc#1280164).
first Oct 21, 2026 -
Medium max 6.8SUSE-SU-2026:4810-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
-
Medium max 6.1SUSE-SU-2026:4807-1 1 CVE
Security update for python-oauthlib
This update for python-oauthlib fixes the following issue: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526).
-
Medium max 6.2SUSE-SU-2026:4799-1 37 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocati…
-
Medium max 5.5SUSE-SU-2026:4829-1 1 CVE
Security update for libraw
This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc…
-
Medium max 5.5SUSE-SU-2026:4828-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).
-
Medium max 4.8SUSE-SU-2026:4827-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing…
-
Medium max 4.8SUSE-SU-2026:4811-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow …
-
Medium max 5.5openSUSE-SU-2026:12205-1 1 CVE
switcheroo-2.6.0-1.1 on GA media
These are all security issues fixed in the switcheroo-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 5.3SUSE-SU-2026:24221-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).
first Oct 9, 2026 -
Medium max 6.5openSUSE-SU-2026:12201-1 2 CVEs
perl-DBI-1.656.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.656.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.5openSUSE-SU-2026:12200-1 1 CVE
libBasicUsageEnvironment2-2026.10.17-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2026.10.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.1openSUSE-SU-2026:12199-1 1 CVE
libinstpatch-1_0-2-1.1.8-1.1 on GA media
These are all security issues fixed in the libinstpatch-1_0-2-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 5.5openSUSE-SU-2026:12194-1 1 CVE
eog-50.4-1.1 on GA media
These are all security issues fixed in the eog-50.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026