35,581 results · Feed
-
Medium max 4.3openSUSE-SU-2026:11386-1 1 CVE
helm-4.2.3-4.1 on GA media
These are all security issues fixed in the helm-4.2.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.7openSUSE-SU-2026:11385-1 3 CVEs
freerdp-3.30.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.30.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3338-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3337-1 1 CVE
Security update for wget
This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix (bsc#1272219, bsc#1271033).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3332-1 9 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.12+8 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - C…
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3336-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue: - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3335-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3334-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue: - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in `parse_date` when processing specially crafted date strings (bsc#1271705).
first Jul 28, 2026 -
Medium max 6.5SUSE-SU-2026:3333-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3331-1 9 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.4+7 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - CV…
first Jul 28, 2026 -
Medium max 6.5SUSE-SU-2026:3330-1 7 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service…
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3329-1 2 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-42055: heap-based buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules (bsc#1268492). - CVE-2026-48142: heap buffer over-read in the `ngx_http_charset_module` module (…
first Jul 28, 2026 -
Critical max 9.6SUSE-SU-2026:3327-1 2 CVEs
Security update for yq
This update for yq fixes the following issues: Update to v4.53.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1267199). - CVE-2026-56852: golang.org/x…
first Jul 28, 2026 -
Critical max 9.1SUSE-SU-2026:22958-1 1 CVE
Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21
This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues: Changes in go compilers: - Switch from update-alternatives to new method. - Packaging im…
first Jul 27, 2026 -
Medium max 6.7SUSE-SU-2026:22956-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
UnscoredSUSE-SU-2026:22955-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
first Jul 25, 2026 -
Low max 3.3SUSE-SU-2026:22954-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:22953-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
Critical max 9.6SUSE-SU-2026:22952-1 2 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266629). - CVE-2026-56852: golang.org/x/text/unic…
first Jul 24, 2026 -
High max 8.1SUSE-SU-2026:22951-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
Critical max 9.1SUSE-SU-2026:22950-1 1 CVE
Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21
This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues: Changes in go compilers: - Switch from update-alternatives to new method. - Packaging im…
first Jul 27, 2026 -
Medium max 6.7SUSE-SU-2026:22948-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
UnscoredSUSE-SU-2026:22947-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
first Jul 25, 2026 -
Low max 3.3SUSE-SU-2026:22946-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
Critical max 9.6SUSE-SU-2026:22945-1 2 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266629). - CVE-2026-56852: golang.org/x/text/unic…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:22944-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
High max 8.1SUSE-SU-2026:22943-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
High max 8.4SUSE-SU-2026:22942-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
Medium max 6.7SUSE-SU-2026:22940-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
UnscoredSUSE-SU-2026:22939-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
first Jul 25, 2026 -
High max 8.4SUSE-SU-2026:22938-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
High max 7.5SUSE-SU-2026:22937-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 23, 2026 -
Low max 2.5SUSE-SU-2026:22936-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:22935-1 1 CVE
Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1271392). Other updates and bugfixes: - Ve…
first Jul 22, 2026 -
Critical max 9.6SUSE-SU-2026:22934-1 2 CVEs
Security update for helm
This update for helm fixes the following issues - Update to version 3.21.3 - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-56852: gol…
first Jul 22, 2026 -
Medium max 5.5SUSE-SU-2026:22932-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451). Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoi…
first Jul 22, 2026 -
Medium max 6.5SUSE-SU-2026:22931-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-o…
first Jul 22, 2026 -
Critical max 9.1SUSE-SU-2026:22929-1 5 CVEs
Security update for perl
This update for perl fixes the following issues: - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date (bsc#1266361). - CVE-2026-8376: heap buffer overflow when compiling regular expressions with…
first Jul 22, 2026 -
High max 7.5SUSE-SU-2026:22928-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 22, 2026 -
Critical max 9.8SUSE-SU-2026:22926-1 4 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director (bsc#1271629). - CVE-2026-15043: `DBI:SQ…
first Jul 22, 2026