6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:0320-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Jan 28, 2026 -
Medium max 6.3SUSE-SU-2026:0314-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Le…
first Jan 28, 2026 -
Medium max 6.6SUSE-SU-2026:0291-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673).
first Jan 26, 2026 -
Medium max 5.3SUSE-SU-2026:0287-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459).
first Jan 23, 2026 -
Medium max 5.5SUSE-SU-2026:0279-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278)
first Jan 23, 2026 -
Medium max 6.3SUSE-SU-2026:0268-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13836: Fixed reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length (bsc#1254400) - CVE-2025-12084: Fixed Denial of Service due …
first Jan 23, 2026 -
Medium max 6.5SUSE-SU-2026:0259-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0254-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: Security fixes: - CVE-2025-68161: Fixed absent TLS hostname verification that may allow a man-in-the-middle attack (bsc#1255427) Other fixes: - Upgrade to 2.18.0 * Added + Add support for Jakarta Mail API in t…
first Jan 22, 2026 -
Medium max 5.1SUSE-SU-2026:0243-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.57.4 - bsc#1243867: + CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels that do not produce any non-ASCII when decoded. + RUSTSEC-2024-0404 - Unsoundness in anstream.
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0238-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4: - CVE-2025-23259: Fixed an attacker on a VM in the system can cause information disclosure and denial of service (bsc#1254161). Changelog: https://doc.dpdk.org/guides-24.11/rel_notes/…
first Jan 22, 2026 -
Medium max 5.3SUSE-SU-2026:0237-1 3 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734). - CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736). - CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0236-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header inj…
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0235-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header injection in wget (CVE-2025-60876, bsc#1253245) Other i…
first Jan 22, 2026 -
Medium max 4.5SUSE-SU-2026:0233-1 1 CVE
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458).
first Jan 22, 2026 -
Medium max 6.8SUSE-SU-2026:0234-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525) - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.1SUSE-SU-2026:0230-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0221-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0220-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0199-1 1 CVE
Security update for python-FontTools
This update for python-FontTools fixes the following issues: - CVE-2025-66034: Fixed arbitrary file write vulnerability that could lead to remote code execution (bsc#1254366).
first Jan 21, 2026 -
Medium max 5.9SUSE-SU-2026:0197-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Jan 21, 2026 -
Medium max 6.1SUSE-SU-2026:0192-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525)
first Jan 21, 2026 -
Medium max 6.3SUSE-SU-2026:0130-1 3 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docu…
first Jan 15, 2026 -
Medium max 6.5SUSE-SU-2026:0143-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498). - CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lea…
first Jan 17, 2026 -
Medium max 6.3SUSE-SU-2026:0133-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-8291: check validity of the ZIP64 End of Central Directory (EOCD) in the 'zipfile' module (bsc#1251305). - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-…
first Jan 16, 2026 -
Medium max 5.3SUSE-SU-2026:0125-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
first Jan 14, 2026 -
Medium max 6.3SUSE-SU-2026:0119-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105)
first Jan 13, 2026 -
Medium max 6.3SUSE-SU-2026:0082-1 1 CVE
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244).
first Jan 9, 2026 -
Medium max 5.5SUSE-SU-2026:0068-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML (bsc#1253278)
first Jan 8, 2026 -
Medium max 5.5SUSE-SU-2026:0080-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Jan 9, 2026 -
Medium max 5.5SUSE-SU-2026:0079-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Jan 9, 2026 -
Medium max 6.3SUSE-SU-2026:0078-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).
first Jan 9, 2026 -
Medium max 5.3SUSE-SU-2026:0050-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 7, 2026 -
Medium max 5.3SUSE-SU-2026:0067-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:0066-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: Fixed bearer token leak on cross-protocol redirect (bsc#1255731) - CVE-2025-15079: Fixed unknown host connection acceptance when set in the global knownhostsfile (bsc#1255733) - CVE-2025-14819…
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:0051-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 7, 2026 -
Medium max 6.3SUSE-SU-2026:0025-1 3 CVEs
Security update for python312
This update for python312 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docu…
first Jan 5, 2026 -
Medium max 5.7SUSE-SU-2026:0042-1 1 CVE
Security update for usbmuxd
This update for usbmuxd fixes the following issues: - CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)
first Jan 6, 2026 -
Medium max 6.3SUSE-SU-2026:0027-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) …
first Jan 5, 2026 -
Medium max 6.3SUSE-SU-2026:0024-1 3 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.11. Security issues fixed: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availab…
first Jan 5, 2026 -
Medium max 6.9SUSE-SU-2026:0023-1 3 CVEs
Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-48040: Excessive resource consumption (bsc#1249472) - CVE-2025-48039: Excessive use of system resources (bsc#1249469) - CVE-2025-48038: Excessive use of system resources (bsc#1249470)
first Jan 5, 2026