35,581 results · Feed
-
High max 8.1openSUSE-SU-2026:21426-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG …
first Jul 22, 2026 -
Medium max 4.3openSUSE-SU-2026:21425-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250). Non security issue fixed: - KDE Discover ignores package locks (bsc#1…
first Jul 22, 2026 -
UnscoredopenSUSE-SU-2026:11357-1 0 CVEs
libsrt1_5-1.5.6-1.1 on GA media
These are all security issues fixed in the libsrt1_5-1.5.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 8.1openSUSE-SU-2026:11356-1 1 CVE
python313-urwid-4.0.5-1.1 on GA media
These are all security issues fixed in the python313-urwid-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11355-1 1 CVE
python313-pikepdf-10.5.1-2.1 on GA media
These are all security issues fixed in the python313-pikepdf-10.5.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11354-1 1 CVE
jupyter-matplotlib-0.11.7-18.1 on GA media
These are all security issues fixed in the jupyter-matplotlib-0.11.7-18.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 8.1openSUSE-SU-2026:11352-1 1 CVE
proftpd-1.3.9c-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.9c-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
Critical max 9.8openSUSE-SU-2026:21437-1 2 CVEs
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: - CVE-2026-64194: Fixed a Denial of Service via deep DNS compression pointer chains [bsc#1272214] - CVE-2026-64193: Fixed a remote execution injection [bsc#1272212]
first Jul 22, 2026 -
Critical max 10.0openSUSE-SU-2026:21436-1 37 CVEs
Security update for rclone
This update for rclone fixes the following issues: Changes in rclone: - Update to version 1.74.4 (boo#1267192): * Version v1.74.4 * gui: update embedded release to 1.1.10 * local: stop --links symlinks escaping the destination directory CVE-2026-54572 * local…
first Jul 22, 2026 -
Low max 2.5openSUSE-SU-2026:21429-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
High max 8.4openSUSE-SU-2026:11353-1 1 CVE
python313-astropy-8.0.1-1.1 on GA media
These are all security issues fixed in the python313-astropy-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
Critical max 9.1openSUSE-SU-2026:11351-1 2 CVEs
perl-XML-Bare-0.53-7.1 on GA media
These are all security issues fixed in the perl-XML-Bare-0.53-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11350-1 1 CVE
perl-HTTP-Date-6.80.0-1.1 on GA media
These are all security issues fixed in the perl-HTTP-Date-6.80.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11349-1 1 CVE
google-osconfig-agent-20260708.00-3.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260708.00-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11348-1 1 CVE
google-guest-agent-20260529.00-4.1 on GA media
These are all security issues fixed in the google-guest-agent-20260529.00-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
Medium max 5.5openSUSE-SU-2026:21428-1 1 CVE
Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1271392). Other updates and bugfixes: - Ve…
first Jul 22, 2026 -
Critical max 9.6openSUSE-SU-2026:11346-1 12 CVEs
chromedriver-150.0.7871.181-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.181-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11345-1 1 CVE
amazon-ecs-init-1.105.0-2.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.105.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
Low max 2.9openSUSE-SU-2026:11344-1 1 CVE
GraphicsMagick-1.3.47-5.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.6SUSE-SU-2026:3224-1 4 CVEs
Security update for SVT-AV1, libyuv0, libaom3
This update for SVT-AV1, libyuv0, libaom3 fixes the following issues: - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-p…
first Jul 23, 2026 -
Low max 2.5SUSE-SU-2026:3223-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Low max 2.5SUSE-SU-2026:3222-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Jul 23, 2026 -
Critical max 9.8SUSE-SU-2026:3221-1 32 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649): - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the DO…
first Jul 23, 2026 -
Low max 2.1SUSE-SU-2026:3211-1 1 CVE
Security update for gawk
This update for gawk fixes the following issue: - CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352).
first Jul 23, 2026 -
Critical max 9.6SUSE-SU-2026:3209-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603).
first Jul 23, 2026 -
Critical max 9.6SUSE-SU-2026:3210-1 1 CVE
Security update for google-guest-agent
This update for google-guest-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603).
first Jul 23, 2026 -
Medium max 6.6SUSE-SU-2026:3208-1 8 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead…
first Jul 23, 2026 -
Medium max 6.9SUSE-SU-2026:3207-1 19 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient restrictions in header/trailer handling can cause uncapped memory usage and a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a excessive…
first Jul 23, 2026 -
High max 7.5SUSE-SU-2026:3206-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buff…
first Jul 23, 2026 -
Medium max 5.9SUSE-SU-2026:3205-1 3 CVEs
Security update for wget
This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58470: server-controlled `Content-Range` header values can cause an integer over…
first Jul 23, 2026 -
Critical max 10.0SUSE-SU-2026:3203-1 21 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: - Security: re-vendor the bundled Go dependencies (no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor): * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736), C…
first Jul 23, 2026 -
High max 8.9SUSE-SU-2026:0367-2 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …
first Jul 23, 2026 -
High max 8.9SUSE-SU-2026:0255-2 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331)
first Jul 23, 2026 -
High max 8.8openSUSE-SU-2026:11347-1 2 CVEs
ffmpeg-8-8.1.2-2.1 on GA media
These are all security issues fixed in the ffmpeg-8-8.1.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 8.1SUSE-SU-2026:3219-1 25 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `Op…
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3218-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3216-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
Medium max 5.4SUSE-SU-2026:3225-1 1 CVE
Security update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni
This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues fixed: - CVE-2026-26032: improper pathname limitation in `PackagerResolver` allows for arbitrary files writes outside of the configured `build…
first Jul 23, 2026 -
Medium max 5.5SUSE-SU-2026:3217-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).
first Jul 23, 2026 -
High max 8.1SUSE-SU-2026:3214-1 9 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues - CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image (bsc#1271102). - CVE-2026-42617: heap buffer overflo…
first Jul 23, 2026