35,648 results · Feed
-
UnscoredopenSUSE-SU-2026:11293-1 0 CVEs
joe-4.6-4.1 on GA media
These are all security issues fixed in the joe-4.6-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11292-1 1 CVE
helm3-3.21.3-2.1 on GA media
These are all security issues fixed in the helm3-3.21.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:11291-1 1 CVE
helm-4.2.3-2.1 on GA media
These are all security issues fixed in the helm-4.2.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Critical max 9.6openSUSE-SU-2026:11290-1 6 CVEs
gomuks-26.03+git.1780250926.564a8707-1.1 on GA media
These are all security issues fixed in the gomuks-26.03+git.1780250926.564a8707-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Medium max 5.5openSUSE-SU-2026:11289-1 1 CVE
firewall-applet-2.3.2-2.1 on GA media
These are all security issues fixed in the firewall-applet-2.3.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
UnscoredopenSUSE-SU-2026:11288-1 3 CVEs
blender-5.2-5.2.0-1.1 on GA media
These are all security issues fixed in the blender-5.2-5.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Critical max 9.8SUSE-SU-2026:3089-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145). - CVE-2026-43038: ipv6: icm…
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21360-1 1 CVE
Security update for hostapd
This update for hostapd fixes the following issues: Changes in hostapd: - CVE-2026-58374: Missing multi-link parsing validation in wpa_supplicant and hostapd (bsc#1269892)
first Jul 15, 2026 -
High max 7.3openSUSE-SU-2026:21359-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow (bsc#1270299) - CVE-2026-58380: Fix buffer overflow in pnmscanner_gettoken (bsc#1270444) - CVE-2026-58381: Prevent double-freeing PSP…
first Jul 15, 2026 -
High max 7.5SUSE-SU-2026:22660-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 14, 2026 -
UnscoredSUSE-SU-2026:22657-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: Changes in python-sqlparse: - GHSA-27jp-wm6q-gp25: Limit recursion during parsing of tuples. (bsc#1268597)
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:22656-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:22655-1 10 CVEs
Security update for python-mistune
This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in `formatting.py` can lead to DoS (bsc#1271117). - CVE-2026-59923: `HTMLRenderer.safe_url()` does not block percent-encoded javasc…
first Jul 14, 2026 -
Medium max 6.2SUSE-SU-2026:22653-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 14, 2026 -
Medium max 4.6SUSE-SU-2026:22651-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22648-1 6 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22647-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.56. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22646-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 13, 2026 -
UnscoredSUSE-SU-2026:22645-1 0 CVEs
Security update for cryptsetup
This update for cryptsetup fixes the following issues: Changes in cryptsetup: - Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refa…
first Jul 13, 2026 -
High max 7.8SUSE-SU-2026:22643-1 5 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…
first Jul 13, 2026 -
High max 7.8SUSE-SU-2026:22641-1 2 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#127101…
first Jul 13, 2026 -
Medium max 5.9SUSE-SU-2026:22639-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:22638-1 30 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.…
first Jul 13, 2026 -
High max 7.1SUSE-SU-2026:22637-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:22636-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
Medium max 5.6SUSE-SU-2026:22635-1 1 CVE
Security update for php8
This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).
first Jul 12, 2026 -
Low max 3.7SUSE-SU-2026:22631-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM client can lead to memory disclosure (bsc#1268885).
first Jul 10, 2026 -
Medium max 5.4SUSE-SU-2026:22630-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
Medium max 5.1SUSE-SU-2026:22627-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 10, 2026 -
High max 8.6SUSE-SU-2026:22626-1 5 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-42311: malicious PSD file processing can lead to arbitrary code execution (bsc#1270404). - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-202…
first Jul 10, 2026 -
High max 7.1SUSE-SU-2026:22625-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22624-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
Critical max 9.1SUSE-SU-2026:22623-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22622-1 7 CVEs
Security update for agama
This update for agama fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270602). - CVE-2026-41678: openssl: incorrect bounds assertion in aes key w…
first Jul 10, 2026 -
High max 8.8SUSE-SU-2026:22621-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 8.1SUSE-SU-2026:22620-1 10 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 10, 2026 -
Critical max 9.0SUSE-SU-2026:22617-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memory manag…
first Jul 10, 2026 -
High max 7.8SUSE-SU-2026:22616-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22615-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
High max 8.5SUSE-SU-2026:22614-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018). - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019). - CVE-2026-56003: computeProps Property Buffe…
first Jul 10, 2026