6,765 results · Clear filters · Feed
-
Medium max 6.9SUSE-SU-2026:20236-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026 -
Medium max 6.3SUSE-SU-2026:20216-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 30, 2026 -
Medium max 5.4SUSE-SU-2026:20221-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Medium max 6.5SUSE-SU-2026:20218-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
Medium max 5.4SUSE-SU-2026:20210-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Medium max 6.5SUSE-SU-2026:20209-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
Medium max 5.9SUSE-SU-2026:20193-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming…
first Jan 29, 2026 -
Medium max 5.7SUSE-SU-2026:20201-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).
first Jan 30, 2026 -
Medium max 5.3SUSE-SU-2026:20200-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range check…
first Jan 30, 2026 -
Medium max 4.6SUSE-SU-2026:20196-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
first Jan 29, 2026 -
Medium max 6.9SUSE-SU-2026:20187-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737)
first Jan 28, 2026 -
Medium max 6.3SUSE-SU-2026:20184-1 1 CVE
Security update for python-FontTools
This update for python-FontTools fixes the following issues: - CVE-2025-66034: Fixed arbitrary file write vulnerability that could lead to remote code execution (bsc#1254366).
first Jan 28, 2026 -
Medium max 5.3SUSE-SU-2026:20182-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: Update to version 12.1: - CVE-2025-64718: js-yaml: fixed prototype pollution in merge (bsc#1255425).
first Jan 27, 2026 -
Medium max 5.7SUSE-SU-2026:20180-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).
first Jan 30, 2026 -
Medium max 5.3SUSE-SU-2026:20170-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: Update to version 12.1: - CVE-2025-64718: js-yaml: fixed prototype pollution in merge (bsc#1255425).
first Jan 27, 2026 -
Medium max 6.5SUSE-SU-2026:20167-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 26, 2026 -
Medium max 6.8SUSE-SU-2026:20155-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:20145-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 26, 2026 -
Medium max 6.5SUSE-SU-2026:20134-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Security fixes: - CVE-2025-60876: HTTP request header injection in wget (bsc#1253245). - CVE-2025-46394: Fixed tar hidden files via escape sequence (bsc#1241661). Other fixes: - Set CONFIG_FIRST_SYSTEM_ID to…
first Jan 22, 2026 -
Medium max 4.5SUSE-SU-2026:20129-1 1 CVE
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458).
first Jan 22, 2026 -
Medium max 5.3SUSE-SU-2026:20130-1 1 CVE
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).
first Jan 22, 2026 -
Medium max 6.8SUSE-SU-2026:20127-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.1SUSE-SU-2026:20126-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: * Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported (it previously was an experime…
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:20121-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735).
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:20096-1 3 CVEs
Security update for cargo-c
This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discard_all_messages (bsc#1243179) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249012) - CVE-2024-12224: idna: Fi…
first Jan 19, 2026 -
Medium max 5.1SUSE-SU-2026:20095-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2851> - Update to Docker 28.5.0-ce. See upstream changelog online at <https:…
first Jan 17, 2026 -
Medium max 6.9SUSE-SU-2026:20088-1 3 CVEs
Security update for erlang
This update for erlang fixes the following issues: Update the ssh component to the latest in the maint-27 branch. Security issues fixed: - CVE-2025-48040: ssh: overly tolerant handling of data received from unauthenticated users when processing key exchange m…
first Jan 15, 2026 -
Medium max 6.3SUSE-SU-2026:20082-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-1…
first Jan 14, 2026 -
Medium max 4.4SUSE-SU-2026:20064-1 3 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765). - CVE-2024-8006: missing return value check in `pcap_find…
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:20062-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 8, 2026 -
Medium max 4.3SUSE-SU-2026:20058-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 2, 2026 -
Medium max 4.8SUSE-SU-2026:20054-1 2 CVEs
Security update for capstone
This update for capstone fixes the following issues: - CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309). - CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer ov…
first Dec 30, 2025 -
Medium max 5.5SUSE-SU-2026:20050-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2025-13193: external inactive snapshots for shut-down VMs that are incorrectly created as world-readable allow unprivileged users to inspect guest OS contents (bsc#1253703). - CV…
first Jan 9, 2026 -
Medium max 6.3SUSE-SU-2026:20047-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400…
first Jan 8, 2026 -
Medium max 4.3SUSE-SU-2026:20044-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:20042-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:20027-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
first Jan 11, 2026 -
Medium max 6.5SUSE-SU-2026:20016-1 1 CVE
Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).
first Dec 22, 2025 -
Medium max 4.8SUSE-SU-2026:0847-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 7, 2026 -
Medium max 6.7SUSE-SU-2026:0741-1 1 CVE
Security update for shim
This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…
first Mar 2, 2026