6,765 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2026:0005-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 2, 2026 -
Medium max 4.0SUSE-SU-2025:4525-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)
first Dec 26, 2025 -
Medium max 4.3SUSE-SU-2025:4511-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out-of-bounds array access via negative index (bsc#1254441)
first Dec 23, 2025 -
Medium max 4.3SUSE-SU-2025:4125-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-59798: Fixed stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (bsc#1250353) - CVE-2025-59799: Fixed stack-based buffer overflow in pdfmark_coerce_dest in devices/vec…
first Nov 18, 2025 -
Medium max 5.3SUSE-SU-2026:20070-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
first Jan 11, 2026 -
Medium max 5.9SUSE-SU-2026:0381-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to 20240116.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 4, 2026 -
Medium max 6.5SUSE-SU-2026:0245-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: Security fixes: - CVE-2025-14178: heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE (bsc#1255711). Other fixes: - Add all php7 packa…
first Jan 22, 2026 -
Medium max 5.3SUSE-SU-2026:0226-1 1 CVE
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).
first Jan 22, 2026 -
Medium max 5.5SUSE-SU-2026:0364-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365). - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_…
first Feb 3, 2026 -
Medium max 5.3SUSE-SU-2026:0099-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821).
first Jan 12, 2026 -
Medium max 4.3SUSE-SU-2026:0041-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 6, 2026 -
Medium max 5.8SUSE-SU-2025:4444-1 4 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE-2025-47911: Fi…
first Dec 18, 2025 -
Medium max 5.1SUSE-SU-2025:4319-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - The fix for CVE-2025-58436 causes a regression where GTK applications will hang. (bsc#1254353) See also https://github.com/OpenPrinting/cups/issues/1429 The fix has been temporary disabled.
first Dec 3, 2025 -
Medium max 4.3SUSE-SU-2025:4277-1 2 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to 3.13.9: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not c…
first Nov 27, 2025 -
Medium max 4.3SUSE-SU-2025:4257-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not …
first Nov 26, 2025 -
Medium max 4.0SUSE-SU-2025:4198-1 3 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374) - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373) - CVE-2025-64524: Fixed out-of-bounds w…
first Nov 24, 2025 -
Medium max 4.3SUSE-SU-2026:0604-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow (bsc#1258000). - CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow (bsc#1257999)…
first Feb 24, 2026 -
Medium max 6.5SUSE-SU-2025:4489-1 1 CVE
Security update for netty
This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: - CVE-2025-67735: lack of URI sanitization in `HttpRequestEncoder` allows for CRLF injection through a request URI and can lead to request smuggling (…
first Dec 19, 2025 -
Medium max 4.3SUSE-SU-2025:4487-1 2 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on th…
first Dec 18, 2025 -
Medium max 5.9SUSE-SU-2025:4486-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgraded to 13.23: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 18, 2025 -
Medium max 5.9SUSE-SU-2025:4485-1 2 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 18, 2025 -
Medium max 5.8SUSE-SU-2025:4446-1 4 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE-2025-47911: Fi…
first Dec 18, 2025 -
Medium max 5.7SUSE-SU-2025:4435-1 1 CVE
Security update for usbmuxd
This update for usbmuxd fixes the following issues: - CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)
first Dec 17, 2025 -
Medium max 6.1SUSE-SU-2025:4432-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issues: - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)
first Dec 17, 2025 -
Medium max 5.1SUSE-SU-2025:4425-1 1 CVE
Security update for cups
This update for cups fixes the following issues: Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057). Other issues fixed: - Update the CVE-2025-58…
first Dec 17, 2025 -
Medium max 6.5SUSE-SU-2025:4411-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.52.12. - CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non-ASCII output when decoded (…
first Dec 16, 2025 -
Medium max 4.3SUSE-SU-2025:4398-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on `os.path.expandvars()` (bsc#1252974). - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central D…
first Dec 15, 2025 -
Medium max 5.7SUSE-SU-2025:4391-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2025-11411: Fixed domain hijacking due to promiscuous records (bsc#1252525)
first Dec 15, 2025 -
Medium max 5.9SUSE-SU-2025:4364-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Dec 11, 2025 -
Medium max 5.9SUSE-SU-2025:4363-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Dec 11, 2025 -
Medium max 4.3SUSE-SU-2025:4257-2 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not …
first Dec 15, 2025 -
Medium max 4.3SUSE-SU-2025:4221-1 2 CVEs
Security update for python39
This update for python39 fixes the following issues: Updated to 3.9.24: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not c…
first Nov 25, 2025 -
Medium max 5.6SUSE-SU-2025:4096-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: * New versioned release of libsframe.so.2 * s390: tools now support SFrame format 2; recognize 'z17' as CPU name [bs…
first Nov 14, 2025 -
Medium max 5.3SUSE-SU-2025:4092-1 4 CVEs
Security update for elfutils
This update for elfutils fixes the following issues: - Fixing build/testsuite for more recent glibc and kernels. - Fixing denial of service and general buffer overflow errors (bsc#1237236, bsc#1237240, bsc#1237241, bsc#1237242): - CVE-2025-1376: Fixed denial …
first Nov 24, 2025 -
Medium max 5.3SUSE-SU-2025:3989-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-8851: Fixed stack-based buffer overflow vulnerability in tools/tiffcrop.c function readSeparateStripsIntoBuffer() by implementing additional error handling (bsc#1248278).
first Nov 7, 2025 -
Medium max 4.7SUSE-SU-2025:3985-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. (bsc#1252749)
first Nov 7, 2025 -
Medium max 5.9SUSE-SU-2025:3966-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: fixed a denial of service condition (bsc#1251194)
first Nov 6, 2025 -
Medium max 4.3SUSE-SU-2025:3946-1 1 CVE
Security update for openjpeg
This update for openjpeg fixes the following issues: - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227410). Other bug fixes: - Ensure no bundled libraries are used (bsc#1250…
first Nov 5, 2025 -
Medium max 5.1SUSE-SU-2025:3944-1 1 CVE
Security update for sccache
This update for sccache fixes the following issues: - CVE-2025-55159 - updated slab with the uninit memory access fix (bsc#1248003)
first Nov 5, 2025 -
Medium max 5.9SUSE-SU-2025:3943-1 3 CVEs
Security update for qatengine, qatlib
This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: * bsc#1233363 (CVE-2024-28885) * bsc#1233365 (CVE-2024-31074) * bsc#1233366 (CVE-2024-33617) Update to 1.7.0: * ip…
first Nov 5, 2025