6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2026:0874-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786).
first Mar 11, 2026 -
Medium max 6.0SUSE-SU-2026:0873-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in `BytesGenerator` (bsc#1257181).
first Mar 11, 2026 -
Medium max 6.5openSUSE-SU-2026:10311-1 1 CVE
corepack24-24.13.0-4.1 on GA media
These are all security issues fixed in the corepack24-24.13.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 8, 2026 -
Medium max 6.3openSUSE-SU-2026:20330-1 1 CVE
Security update for python-uv
This update for python-uv fixes the following issue: - CVE-2025-13327: parsing differentials when processing specially crafted ZIP archives during package installation can lead to arbitrary code execution (bsc#1258993).
first Mar 6, 2026 -
Medium max 4.3openSUSE-SU-2026:10309-1 1 CVE
weblate-5.16.1-1.1 on GA media
These are all security issues fixed in the weblate-5.16.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
Medium max 6.8openSUSE-SU-2026:10308-1 1 CVE
virtiofsd-1.13.2-2.1 on GA media
These are all security issues fixed in the virtiofsd-1.13.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
Medium max 5.3openSUSE-SU-2026:10298-1 5 CVEs
exiv2-0.28.8-1.1 on GA media
These are all security issues fixed in the exiv2-0.28.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2026 -
Medium max 5.4SUSE-SU-2026:0838-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issue: - CVE-2025-67724: missing validation of the supplied reason phrase (bsc#1254903).
first Mar 6, 2026 -
Medium max 5.8SUSE-SU-2026:0833-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
first Mar 5, 2026 -
Medium max 5.5SUSE-SU-2026:0832-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Security issue: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). Non security issues: - * hw/virtio: Also include md stubs in case CONFIG_VIRTIO_PCI is not set (jsc#PED-14271). -…
first Mar 5, 2026 -
Medium max 4.6SUSE-SU-2026:0831-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - Updated to version 2.6.10 that fixes: * CVE-2025-13086: improper validation of IP addresses that can cause denial of service (bsc#1254486)
first Mar 5, 2026 -
Medium max 5.3SUSE-SU-2026:0829-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: Security issue: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#125796…
first Mar 5, 2026 -
Medium max 5.7SUSE-SU-2026:0828-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2025-68158: Fixed 1-click account takeover in applications that use the Authlib library (bsc#1256414)
first Mar 5, 2026 -
Medium max 6.9SUSE-SU-2026:0826-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144) - CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)
first Mar 5, 2026 -
Medium max 6.8SUSE-SU-2026:0824-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following (bsc#1257116)
first Mar 5, 2026 -
Medium max 6.2openSUSE-SU-2026:20312-1 5 CVEs
Security update for libxml2, libxslt
This update for libxml2, libxslt fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…
first Mar 4, 2026 -
Medium max 4.7SUSE-SU-2026:0810-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issue: - CVE-2026-3201: USB HID protocol dissector memory exhaustion (bsc#1258907).
first Mar 4, 2026 -
Medium max 6.8SUSE-SU-2026:0819-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
-
Medium max 5.5SUSE-SU-2026:0817-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
-
Medium max 6.8SUSE-SU-2026:0816-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
-
Medium max 5.8SUSE-SU-2026:0811-1 3 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header wh…
-
Medium max 6.8SUSE-SU-2026:0806-1 1 CVE
Security update for wicked2nm,suse-migration-services,suse-migration-sle16-activation,SLES16-Migration,SLES16-SAP_Migration
This update for wicked2nm,suse-migration-services,suse-migration-sle16-activation,SLES16-Migration,SLES16-SAP_Migration fixes the following issues: Changes for SLES16-SAP_Migration: - Bump version: 2.1.30 Changes for SLES16-Migration: - Bump version: 2.1.30 C…
first Mar 4, 2026 -
Medium max 5.5SUSE-SU-2026:0801-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-10911: use-after-free will be fixed on libxml2 side instead (bsc#1250553).
first Mar 4, 2026 -
Medium max 6.8SUSE-SU-2026:20534-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Mar 2, 2026 -
Medium max 5.8SUSE-SU-2026:0796-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
-
Medium max 5.9SUSE-SU-2026:0777-1 9 CVEs
Security update for cosign
This update for cosign fixes the following issues: Update to version 3.0.5 (jsc#SLE-23879). Security issues fixed: - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs (bsc#1250620). - CVE-2025-58181: golang.org/x/crypto/s…
first Mar 3, 2026 -
Medium max 5.6SUSE-SU-2026:0776-1 1 CVE
Security update for evolution-data-server
This update for evolution-data-server fixes the following issue: - CVE-2026-2604: arbitrary file deletion via inconsistent URI handling (bsc#1258307).
first Mar 3, 2026 -
Medium max 5.6SUSE-SU-2026:0775-1 1 CVE
Security update for evolution-data-server
This update for evolution-data-server fixes the following issue: - CVE-2026-2604: arbitrary file deletion via inconsistent URI handling (bsc#1258307).
first Mar 3, 2026 -
Medium max 5.3SUSE-SU-2026:0772-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)
first Mar 3, 2026 -
Medium max 5.8SUSE-SU-2026:0792-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
-
Medium max 5.8SUSE-SU-2026:0788-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
first Mar 3, 2026 -
Medium max 6.3SUSE-SU-2026:0767-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-12781: inadequate parameter check can cause data int…
first Mar 3, 2026 -
Medium max 6.2SUSE-SU-2026:0782-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Mar 3, 2026 -
Medium max 5.6SUSE-SU-2026:0780-1 4 CVEs
Security update for tracker-miners
This update for tracker-miners fixes the following issues: - CVE-2026-1764: heap buffer overflow leads to denial of service or information disclosure when parsing MP3 files (bsc#1257606). - CVE-2026-1765: denial of Service and potential information disclosure…
first Mar 3, 2026 -
Medium max 6.5SUSE-SU-2026:0779-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Mar 3, 2026 -
Medium max 6.5SUSE-SU-2026:0778-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Mar 3, 2026 -
Medium max 6.9SUSE-SU-2026:0647-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144) - CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)
first Feb 25, 2026 -
Medium max 6.9SUSE-SU-2026:0646-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144) - CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)
first Feb 25, 2026 -
Medium max 6.0SUSE-SU-2026:0645-1 6 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie…
first Feb 25, 2026 -
Medium max 6.0SUSE-SU-2026:0644-1 6 CVEs
Security update for python312
This update for python312 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cook…
first Feb 25, 2026