6,765 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2025:01650-1 8 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123) - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel…
first May 22, 2025 -
Medium max 4.3SUSE-SU-2025:01638-1 1 CVE
Security update for openssh
This update for openssh fixes the following issue: Security fixes: - CVE-2025-32728: Fixed logic error in DisableForwarding option (bsc#1241012) Other fixes: - Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2 due to gssapi proposal not being cor…
first May 21, 2025 -
Medium max 5.9SUSE-RU-2024:1829-2 1 CVE
Recommended update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-python-sdk-acms-open, python-aliyun-python-sdk-actiontrail, python-aliyun-python-sdk-adb, python-aliyun-python-sdk-adcp, python-aliyun-python-sdk-address-purification, python-aliyun-python-sdk-aegis, python-aliyun-python-sdk-afs, python-aliyun-python-sdk-aigen, python-aliyun-python-sdk-aimiaobi, python-aliyun-python-sdk-airec, python-aliyun-python-sdk-airticketopen, python-a
This update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-python-sdk-acms-open, python-aliyun-python-sdk-actiontrail, python-aliyun-python-sdk-adb, python-aliyun-python-sdk-adcp, python-aliyun-python-s…
first Sep 20, 2024 -
Medium max 6.9SUSE-SU-2025:01456-2 3 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020) - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) Other fix…
first Jun 27, 2025 -
Medium max 5.9SUSE-SU-2025:4484-1 2 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgraded to 15.15: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 18, 2025 -
Medium max 5.1SUSE-SU-2025:03306-1 2 CVEs
Security update for sevctl
This update for sevctl fixes the following issues: - CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243860) - CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch (bsc#1242618)
first Sep 23, 2025 -
Medium max 5.4SUSE-SU-2025:02278-1 4 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318…
first Jul 10, 2025 -
Medium max 6.5SUSE-SU-2025:20858-1 5 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248006) - CVE-2025-3416: openssl: Use-Afte…
first Oct 14, 2025 -
Medium max 6.0openSUSE-SU-2026:10398-1 1 CVE
python311-3.11.15-3.1 on GA media
These are all security issues fixed in the python311-3.11.15-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 20, 2026 -
Medium max 5.3SUSE-SU-2026:0936-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
first Mar 20, 2026 -
Medium max 5.5openSUSE-SU-2026:10395-1 2 CVEs
qemu-10.2.2-1.1 on GA media
These are all security issues fixed in the qemu-10.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2026 -
Medium max 5.7openSUSE-SU-2026:10394-1 1 CVE
python313-3.13.12-2.1 on GA media
These are all security issues fixed in the python313-3.13.12-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2026 -
Medium max 5.7openSUSE-SU-2026:10391-1 1 CVE
GraphicsMagick-1.3.46-3.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2026 -
Medium max 6.5SUSE-SU-2026:0922-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385)
first Mar 18, 2026 -
Medium max 4.3SUSE-SU-2026:0923-1 2 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-28295: Fix ftp use control connection address for PASV data (bsc#1258953). - CVE-2026-28296: Fix ftp reject paths containing CR/LF characters (bsc#1258954).
first Mar 18, 2026 -
Medium max 6.5SUSE-SU-2026:0921-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 18, 2026 -
Medium max 4.3SUSE-SU-2026:0916-1 2 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-28295: fixed by using control connection address for PASV data (bsc#1258953). - CVE-2026-28296: fixed by rejecting paths containing CR/LF characters (bsc#1258954).
first Mar 18, 2026 -
Medium max 5.7openSUSE-SU-2026:10381-1 1 CVE
python311-3.11.15-2.1 on GA media
These are all security issues fixed in the python311-3.11.15-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 17, 2026 -
Medium max 5.3openSUSE-SU-2026:10378-1 1 CVE
ovmf-202602-5.1 on GA media
These are all security issues fixed in the ovmf-202602-5.1 package on the GA media of openSUSE Tumbleweed.
first Mar 17, 2026 -
Medium max 5.7openSUSE-SU-2026:10377-1 1 CVE
python312-3.12.13-2.1 on GA media
These are all security issues fixed in the python312-3.12.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 16, 2026 -
Medium max 5.9openSUSE-SU-2026:10346-1 1 CVE
ruby4.0-rubygem-fluentd-1.17.1-1.5 on GA media
These are all security issues fixed in the ruby4.0-rubygem-fluentd-1.17.1-1.5 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 5.1openSUSE-SU-2026:10326-1 1 CVE
giflib-devel-32bit-5.2.2-3.1 on GA media
These are all security issues fixed in the giflib-devel-32bit-5.2.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 4.2openSUSE-SU-2026:10359-1 1 CVE
ruby4.0-rubygem-rack-session-2.1.1-1.3 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rack-session-2.1.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 6.8openSUSE-SU-2026:10334-1 1 CVE
python311-pypdf-6.8.0-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 6.0SUSE-SU-2026:0891-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in `BytesGenerator` (bsc#1257181).
first Mar 13, 2026 -
Medium max 6.8openSUSE-SU-2026:10332-1 1 CVE
python311-PyPDF2-2.11.1-7.1 on GA media
These are all security issues fixed in the python311-PyPDF2-2.11.1-7.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 5.3openSUSE-SU-2026:10331-1 2 CVEs
mingw64-binutils-2.45.1-2.1 on GA media
These are all security issues fixed in the mingw64-binutils-2.45.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 5.3openSUSE-SU-2026:10330-1 2 CVEs
mingw32-binutils-2.45.1-2.1 on GA media
These are all security issues fixed in the mingw32-binutils-2.45.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 6.9openSUSE-SU-2026:10370-1 2 CVEs
smb4k-4.0.5-1.2 on GA media
These are all security issues fixed in the smb4k-4.0.5-1.2 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 5.3openSUSE-SU-2026:10325-1 1 CVE
clamav-1.5.2-1.1 on GA media
These are all security issues fixed in the clamav-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2026 -
Medium max 6.1SUSE-SU-2026:0898-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issues: - CVE-2025-64505: heap buffer over-read in 'png_do_quantize' via malformed palette index (bsc#1254157).
first Mar 13, 2026 -
Medium max 6.0SUSE-SU-2026:0897-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181).
first Mar 13, 2026 -
Medium max 4.8SUSE-SU-2026:0894-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 13, 2026 -
Medium max 5.5SUSE-SU-2026:0889-1 1 CVE
Security update for qemu
This update for qemu fixes the following issue: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400).
first Mar 13, 2026 -
Medium max 6.8SUSE-SU-2026:0860-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257918).
first Mar 10, 2026 -
Medium max 5.3SUSE-SU-2026:0862-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs) (bsc#1257960).
first Mar 11, 2026 -
Medium max 6.1openSUSE-SU-2026:20345-1 2 CVEs
Security update for python-lxml_html_clean
This update for python-lxml_html_clean fixes the following issues: Changes in python-lxml_html_clean: - CVE-2026-28348: improper keywords checking can allow external CSS loading (bsc#1259378) - CVE-2026-28350: lack of base tag handling can allow the hijacking…
first Mar 11, 2026 -
Medium max 5.3SUSE-SU-2026:0870-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
first Mar 11, 2026 -
Medium max 4.8SUSE-SU-2026:0886-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 12, 2026 -
Medium max 6.0SUSE-SU-2026:0884-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181).
first Mar 12, 2026