6,753 results · Clear filters · Feed
-
Medium max 6.1SUSE-SU-2026:23927-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 22, 2026 -
Medium max 6.5SUSE-SU-2026:23926-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 22, 2026 -
Medium max 4.3SUSE-SU-2026:23925-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 21, 2026 -
Medium max 5.5openSUSE-SU-2026:11896-1 1 CVE
libXpm-devel-3.5.18-3.1 on GA media
These are all security issues fixed in the libXpm-devel-3.5.18-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 5.3SUSE-SU-2026:4367-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:4366-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 28, 2026 -
Medium max 6.8SUSE-SU-2026:23707-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
Medium max 6.2SUSE-SU-2026:23660-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
Medium max 4.8SUSE-SU-2026:23627-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Medium max 6.5SUSE-SU-2026:23628-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 6.8SUSE-SU-2026:23624-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 4, 2026 -
Medium max 4.0SUSE-SU-2026:23621-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23620-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 5.3SUSE-SU-2026:23619-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).
first Sep 3, 2026 -
Medium max 5.5SUSE-SU-2026:23613-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:23612-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 3, 2026 -
Medium max 6.8SUSE-SU-2026:23610-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…
first Sep 3, 2026 -
Medium max 6.5openSUSE-SU-2026:11909-1 1 CVE
tor-0.4.9.13-1.1 on GA media
These are all security issues fixed in the tor-0.4.9.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 5.5openSUSE-SU-2026:11905-1 1 CVE
tealdeer-1.8.0-2.1 on GA media
These are all security issues fixed in the tealdeer-1.8.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.5openSUSE-SU-2026:11894-1 3 CVEs
libX11-6-1.8.13-3.1 on GA media
These are all security issues fixed in the libX11-6-1.8.13-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.3openSUSE-SU-2026:11892-1 2 CVEs
helm3-3.22.0-2.1 on GA media
These are all security issues fixed in the helm3-3.22.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.8SUSE-SU-2026:23728-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
Medium max 5.9SUSE-SU-2026:23722-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Medium max 5.9SUSE-SU-2026:23702-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Medium max 6.8SUSE-SU-2026:23671-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
Medium max 6.2SUSE-SU-2026:23644-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:23636-1 2 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276612). - CVE-2026-81092: github.com/mark3labs/mcp-go/serv…
first Sep 6, 2026 -
Medium max 5.1SUSE-SU-2026:23634-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 6, 2026 -
Medium max 6.5SUSE-SU-2026:23633-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 6, 2026 -
Medium max 5.3SUSE-SU-2026:23630-1 1 CVE
Security update for msgpack-c
This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation (bsc#1275911).
first Sep 6, 2026 -
Medium max 6.9SUSE-SU-2026:23572-1 6 CVEs
Security update for gstreamer-devtools
This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subsc…
first Aug 30, 2026 -
Medium max 6.8SUSE-SU-2026:23564-1 1 CVE
Security update for librest
This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).
first Aug 30, 2026 -
Medium max 5.3SUSE-SU-2026:23563-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Aug 30, 2026 -
Medium max 6.9SUSE-SU-2026:23550-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).
first Aug 27, 2026 -
Medium max 5.7SUSE-SU-2026:4376-1 14 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582). - CVE-2026-62946…
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:4373-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 28, 2026 -
Medium max 5.3SUSE-SU-2026:4365-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Sep 28, 2026 -
Medium max 6.5SUSE-SU-2026:4363-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:23879-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 22, 2026 -
Medium max 5.3SUSE-SU-2026:23880-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 22, 2026