35,648 results · Feed
-
High max 8.2openSUSE-SU-2026:11308-1 5 CVEs
libsuricata8_0_6-8.0.6-1.1 on GA media
These are all security issues fixed in the libsuricata8_0_6-8.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
High max 8.7openSUSE-SU-2026:11307-1 1 CVE
kubevirt1.8-container-disk-1.8.4-1.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
Low max 3.3openSUSE-SU-2026:11306-1 1 CVE
kbfs-6.6.3-3.1 on GA media
These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11305-1 13 CVEs
containerized-data-importer1.65-api-1.65.0-2.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 18, 2026 -
Medium max 6.5openSUSE-SU-2026:21364-1 1 CVE
Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-49452: CSS Injection via Presentational Hints (bsc#1270401)
first Jul 16, 2026 -
Medium max 5.7SUSE-SU-2026:3117-1 1 CVE
Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin packs (bsc#1268138).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3116-1 1 CVE
Security update for libqt4
This update for libqt4 fixes the following issue - CVE-2025-14575: local user can load rogue CA certificates as trusted system authority via a crafted file placed in the application's working directory (bsc#1265896).
first Jul 17, 2026 -
High max 8.2SUSE-SU-2026:3115-1 1 CVE
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue - CVE-2026-34253: buffer underflow in the `ogg123` utility in function `remotethread` of `remote.c` (bsc#1265361).
first Jul 17, 2026 -
High max 8.2SUSE-SU-2026:3114-1 1 CVE
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue - CVE-2026-34253: buffer underflow in the `ogg123` utility in function `remotethread` of `remote.c` (bsc#1265361).
first Jul 17, 2026 -
High max 7.5SUSE-SU-2026:3113-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
first Jul 17, 2026 -
Critical max 9.1SUSE-SU-2026:3112-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.56. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3111-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3110-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 17, 2026 -
High max 8.8SUSE-SU-2026:3105-1 9 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …
first Jul 17, 2026 -
UnscoredSUSE-SU-2026:3108-1 0 CVEs
Security update for joe
This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file (bsc#1269379).
first Jul 17, 2026 -
Critical max 9.1SUSE-SU-2026:3104-1 4 CVEs
Security update for python311
This update for python311 fixes the following issues - CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host (bsc#1261969). - CVE-2026-4786: URLs containing `%action` can bypass mitigation that allows command injection via the `w…
first Jul 17, 2026 -
Medium max 6.5SUSE-SU-2026:3103-1 2 CVEs
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (b…
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3100-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3097-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3095-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Critical max 9.8openSUSE-SU-2026:11298-1 4 CVEs
perl-DBI-1.651.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.651.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.8SUSE-SU-2026:3102-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#12710…
first Jul 17, 2026 -
Medium max 6.9SUSE-SU-2026:3101-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jul 17, 2026 -
UnscoredSUSE-SU-2026:3099-1 0 CVEs
Security update for dash
This update for dash fixes the following issues - CVE-2026-31323: arithmetic expansion evaluating INTMAX_MIN / -1 can lead to a signed integer overflow and a denial of service (bsc#1269494).
first Jul 17, 2026 -
Critical max 9.1SUSE-SU-2026:3098-1 1 CVE
Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service (bsc#12493…
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:3096-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 17, 2026 -
Critical max 9.1SUSE-SU-2026:3094-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 17, 2026 -
Low max 3.4SUSE-SU-2026:3093-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jul 17, 2026 -
Medium max 5.8SUSE-SU-2026:3090-1 5 CVEs
Security update for ruby3.4
This update for ruby3.4 fixes the following issues - CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments (bsc#1268011). - CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in 'raw' argument (bsc#1268337). - CVE-2026-47241:…
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21362-1 2 CVEs
Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in t…
first Jul 16, 2026 -
Medium max 6.5openSUSE-SU-2026:11304-1 2 CVEs
system-user-zabbix-7.0.28-1.1 on GA media
These are all security issues fixed in the system-user-zabbix-7.0.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.9openSUSE-SU-2026:11303-1 1 CVE
wget-1.25.0-4.1 on GA media
These are all security issues fixed in the wget-1.25.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11302-1 2 CVEs
trivy-0.72.0-2.1 on GA media
These are all security issues fixed in the trivy-0.72.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Low max 3.3openSUSE-SU-2026:11301-1 1 CVE
runc-1.4.3-1.1 on GA media
These are all security issues fixed in the runc-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11300-1 1 CVE
php-composer2-2.10.2-2.1 on GA media
These are all security issues fixed in the php-composer2-2.10.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Critical max 9.1openSUSE-SU-2026:11299-1 4 CVEs
perl-YAML-Syck-1.470.0-1.1 on GA media
These are all security issues fixed in the perl-YAML-Syck-1.470.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.1openSUSE-SU-2026:11297-1 1 CVE
oras-1.3.3-2.1 on GA media
These are all security issues fixed in the oras-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.7openSUSE-SU-2026:11296-1 1 CVE
opam-2.5.2-1.2 on GA media
These are all security issues fixed in the opam-2.5.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 8.2openSUSE-SU-2026:11295-1 3 CVEs
nginx-1.31.3-1.1 on GA media
These are all security issues fixed in the nginx-1.31.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:11294-1 5 CVEs
lux-0.24.1-1.1 on GA media
These are all security issues fixed in the lux-0.24.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026