6,753 results · Clear filters · Feed
-
Medium max 5.7openSUSE-SU-2026:12192-1 6 CVEs
cups-2.4.20-1.1 on GA media
These are all security issues fixed in the cups-2.4.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.2openSUSE-SU-2026:12189-1 7 CVEs
GraphicsMagick-1.3.49-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.49-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.8SUSE-SU-2026:24246-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
Medium max 5.5SUSE-SU-2026:24236-1 2 CVEs
Security update for agama
This update for agama fixes the following issues: Changes in agama: - Added support for the "inst.listen_on" boot parameter - The "inst.remote=0" option disables remote access (needed for CC compliant installation jsc#PED-16702) - It is possible to specify IP…
first Oct 9, 2026 -
Medium max 6.5SUSE-SU-2026:24232-1 2 CVEs
Security update for stunnel
This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). - CVE-2026-70368: oversized log messages in logging routines can cause stack out-…
first Oct 12, 2026 -
Medium max 6.8SUSE-SU-2026:24223-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * …
first Oct 9, 2026 -
Medium max 5.9SUSE-SU-2026:24218-1 1 CVE
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: - CVE-2026-92091: `JWK.import_key()` validates the `key_ops` JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive r…
first Oct 9, 2026 -
Medium max 6.3SUSE-SU-2026:24216-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 9, 2026 -
Medium max 5.5SUSE-SU-2026:24204-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 8, 2026 -
Medium max 6.5SUSE-SU-2026:24201-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration p…
first Oct 8, 2026 -
Medium max 6.2SUSE-SU-2026:24193-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
Medium max 6.1SUSE-SU-2026:4765-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917).
first Oct 20, 2026 -
Medium max 5.5SUSE-SU-2026:4763-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 20, 2026 -
Medium max 5.5SUSE-SU-2026:4761-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 20, 2026 -
Medium max 6.2SUSE-SU-2026:4753-1 24 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause…
first Oct 20, 2026 -
Medium max 6.5openSUSE-SU-2026:22130-1 3 CVEs
Security update for grok-build
This update for grok-build fixes the following issues: Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure (boo#1285155) - CVE-2026-109350: gix-pack ofs-delta base-distance handling flaw (boo#1285155) - CVE-2026-109351: …
first Oct 19, 2026 -
Medium max 6.5openSUSE-SU-2026:22128-1 2 CVEs
Security update for libxls
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix us…
first Oct 19, 2026 -
Medium max 5.4openSUSE-SU-2026:22126-1 1 CVE
Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: Update to version 0.60.0: * BREAKING: remove the full-screen progress mode: the --progress and --progress-keep-open flags and the prodash-render-tui feature are gone, line progress stay…
first Oct 19, 2026 -
Medium max 5.3openSUSE-SU-2026:12187-1 2 CVEs
ImageMagick-7.1.2.34-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.34-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 19, 2026 -
Medium max 6.8SUSE-SU-2026:24189-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
Medium max 4.4SUSE-SU-2026:4735-1 2 CVEs
Security update for alsa
This update for alsa fixes the following issues: - CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in `src/topology/ctl.c` allows for integer overflow that can cause sensitive data leak and application crashes (bsc#128256…
first Oct 19, 2026 -
Medium max 5.9openSUSE-SU-2026:22122-1 1 CVE
Security update for psqlODBC
This update for psqlODBC fixes the following issues: Changes in psqlODBC: Update to 18.00.0005: * https://odbc.postgresql.org/docs/release.html * Fix heap memory corruption when an application binds more than 32767 parameters on a single statement. SQLBindPar…
first Oct 16, 2026 -
Medium max 5.9openSUSE-SU-2026:22109-1 2 CVEs
Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399).…
first Oct 16, 2026 -
Medium max 6.2openSUSE-SU-2026:22105-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
Medium max 6.8openSUSE-SU-2026:22103-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
Medium max 6.5openSUSE-SU-2026:22088-1 2 CVEs
Security update for stunnel
This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). - CVE-2026-70368: oversized log messages in logging routines can cause stack out-…
first Oct 12, 2026 -
Medium max 5.3openSUSE-SU-2026:22077-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).
first Oct 9, 2026 -
Medium max 6.8openSUSE-SU-2026:22079-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * …
first Oct 9, 2026 -
Medium max 5.5openSUSE-SU-2026:22075-1 2 CVEs
Security update for agama
This update for agama fixes the following issues: Changes in agama: - Added support for the "inst.listen_on" boot parameter - The "inst.remote=0" option disables remote access (needed for CC compliant installation jsc#PED-16702) - It is possible to specify IP…
first Oct 12, 2026 -
Medium max 5.9openSUSE-SU-2026:22073-1 1 CVE
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: - CVE-2026-92091: `JWK.import_key()` validates the `key_ops` JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive r…
first Oct 9, 2026 -
Medium max 6.3openSUSE-SU-2026:22070-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 9, 2026 -
Medium max 6.5openSUSE-SU-2026:22055-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration p…
first Oct 8, 2026 -
Medium max 6.1openSUSE-SU-2026:22048-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issues: Security issue fixed: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for …
first Oct 7, 2026 -
Medium max 5.5openSUSE-SU-2026:22056-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 8, 2026 -
Medium max 6.5openSUSE-SU-2026:12185-1 1 CVE
python313-vllm-0.32.0-1.1 on GA media
These are all security issues fixed in the python313-vllm-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Medium max 6.3openSUSE-SU-2026:12183-1 1 CVE
praat-7.0.02-2.1 on GA media
These are all security issues fixed in the praat-7.0.02-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Medium max 6.1openSUSE-SU-2026:12181-1 2 CVEs
hashcat-7.1.2+git942-1.1 on GA media
These are all security issues fixed in the hashcat-7.1.2+git942-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Medium max 5.1openSUSE-SU-2026:12171-1 1 CVE
ab-av1-0.11.7-1.1 on GA media
These are all security issues fixed in the ab-av1-0.11.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Medium max 5.6openSUSE-SU-2026:12170-1 21 CVEs
ImageMagick-7.1.2.34-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.34-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026 -
Medium max 5.5openSUSE-SU-2026:12182-1 1 CVE
in-toto-3.1.0-1.1 on GA media
These are all security issues fixed in the in-toto-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2026