35,581 results · Feed
-
Critical max 9.1openSUSE-SU-2026:21481-1 9 CVEs
Security update for vexctl
This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234486). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected m…
first Jul 30, 2026 -
Critical max 9.6openSUSE-SU-2026:21480-1 3 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation (bsc#1272488). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded l…
first Jul 30, 2026 -
UnscoredopenSUSE-SU-2026:21479-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Changes in libpng16: Version update to 1.6.58 [jsc#PED-16190] * see CHANGES for other upstream changes
first Jul 29, 2026 -
High max 7.7openSUSE-SU-2026:21477-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an attacker-controlled server (bsc#1271044). - CVE-2026-59996: scp: file placed in the pa…
first Jul 29, 2026 -
Critical max 9.6openSUSE-SU-2026:21476-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/te…
first Jul 29, 2026 -
High max 8.8openSUSE-SU-2026:21475-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths witho…
first Jul 29, 2026 -
Critical max 9.1openSUSE-SU-2026:21490-1 2 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues - Update to Tomcat 11.0.24 - CVE-2026-59083: Incorrect URL decoding in RewriteValve may allow security control bypass (bsc#1271397). - CVE-2026-59084: EncryptInterceptor requirements not clearly documented (…
first Jul 30, 2026 -
UnscoredSUSE-SU-2026:3435-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 30, 2026 -
UnscoredSUSE-SU-2026:3434-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 30, 2026 -
High max 8.4SUSE-SU-2026:3433-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Jul 30, 2026 -
Critical max 9.6SUSE-SU-2026:3432-1 2 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/…
first Jul 30, 2026 -
High max 7.5SUSE-SU-2026:3431-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed (bsc#1272214).
first Jul 30, 2026 -
UnscoredSUSE-SU-2026:3429-1 0 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340). - file descriptor l…
first Jul 30, 2026 -
High max 8.4SUSE-SU-2026:3428-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Jul 30, 2026 -
Critical max 9.1SUSE-SU-2026:3430-1 2 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.24. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:3427-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (bsc#1272443). - CVE-2026-63639: corrupt stream RDB file…
first Jul 30, 2026 -
High max 8.6SUSE-SU-2026:3426-1 9 CVEs
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.26. Security issues fixed: - CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit (bsc…
first Jul 30, 2026 -
High max 8.1SUSE-SU-2026:3425-1 1 CVE
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by `Screen.start()` are not cryptographically secure (bsc#1271868).
first Jul 30, 2026 -
Low max 1.7SUSE-SU-2026:3424-1 1 CVE
Security update for python3-pyOpenSSL
This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in `set_tlsext_servername_callback` callback can result in connection not being cancelled and allows for possible security measure bypassing (bsc#1259804).
first Jul 30, 2026 -
Low max 1.8openSUSE-SU-2026:21468-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496).
first Jul 28, 2026 -
High max 8.7openSUSE-SU-2026:21464-1 8 CVEs
Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429). - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:de…
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:21459-1 6 CVEs
Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21457-1 1 CVE
Security update for hawk-apiserver
This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 (bsc#1267454) Version 0.1.0+git.1773234993.db3c82f: * handle /cib/live/primitives/<resource_id>/edit in ha…
first Jul 28, 2026 -
Critical max 9.6openSUSE-SU-2026:21456-1 2 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21455-1 1 CVE
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128).
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3415-1 6 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
-
Medium max 5.7SUSE-SU-2026:3414-1 5 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argumen…
-
Medium max 5.7SUSE-SU-2026:3412-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when …
-
Medium max 5.3SUSE-SU-2026:3408-1 1 CVE
Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py (bsc#1271525).
first Jul 29, 2026 -
Medium max 6.0SUSE-SU-2026:3407-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled (bsc#1270413). - CVE-2026-13698: denial of service via memory leak t…
first Jul 29, 2026 -
High max 7.5SUSE-SU-2026:3406-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - …
first Jul 29, 2026 -
Medium max 4.3SUSE-SU-2026:3405-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issue: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).
first Jul 29, 2026 -
Medium max 4.3SUSE-SU-2026:3404-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).
first Jul 29, 2026 -
Critical max 9.1SUSE-SU-2026:3403-1 2 CVEs
Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues - CVE-2026-13401: infinite loop when parsing malformed attributes in `parserc_parse` function (bsc#1271640). - CVE-2026-57074: out-of-bounds read due to unbounded character lookahead in the `parserc_par…
first Jul 29, 2026 -
Medium max 6.4SUSE-SU-2026:3401-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 29, 2026 -
High max 7.3SUSE-SU-2026:3399-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues - CVE-2026-58379: Heap buffer overflow in read_channel_data() (bsc#1270299). - CVE-2026-58380: Stack buffer overflow in pnmscanner_gettoken() (bsc#1270444). - CVE-2026-58381: double-free in read_layer_block() (b…
first Jul 29, 2026 -
High max 7.5openSUSE-SU-2026:21470-1 9 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unau…
first Jul 28, 2026 -
Critical max 9.6SUSE-SU-2026:3421-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugf…
-
High max 8.8SUSE-SU-2026:3409-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Jul 29, 2026 -
High max 8.8SUSE-SU-2026:3423-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…