35,648 results · Feed
-
High max 7.8SUSE-SU-2026:2700-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).
first Jun 30, 2026 -
High max 7.8SUSE-SU-2026:2699-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).
first Jun 30, 2026 -
Medium max 5.0SUSE-SU-2026:2697-1 6 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper c…
first Jun 30, 2026 -
High max 8.8SUSE-SU-2026:2696-1 8 CVEs
Security update for 7zip
This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858). - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (…
first Jun 30, 2026 -
High max 7.7SUSE-SU-2026:2695-1 19 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-48618: tls: normalize hostname for server identity checks (bsc#1268593). - CVE-2026-48933: crypto: guard WebCrypto cipher output length (bsc#1268592). - CVE-2026-48615: lib,test: redact proxy cre…
first Jun 30, 2026 -
Critical max 9.1SUSE-SU-2026:2693-1 5 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-…
first Jun 30, 2026 -
Critical max 9.6SUSE-SU-2026:2692-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 30, 2026 -
UnscoredSUSE-SU-2026:2691-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue Update to version 1.47+16.aad0b411: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 30, 2026 -
UnscoredSUSE-SU-2026:2690-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue Update to version 1.44~763+23.769c9b5b: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 30, 2026 -
UnscoredSUSE-SU-2026:2689-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue Update to version 1.43+49.47792c16: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 30, 2026 -
UnscoredSUSE-SU-2026:2688-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 30, 2026 -
UnscoredSUSE-SU-2026:2687-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue Update to version 1.44~763+20.e416e091: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 30, 2026 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 29, 2026 -
High max 8.4openSUSE-SU-2026:21161-1 3 CVEs
Security update for python-pdm
This update for python-pdm fixes the following issues: Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files (bsc#1268384) - CVE-2026-47763: Do not write to paths outside the scheme dir (bsc#1268385) - CVE-2026-47781: Updat…
first Jun 26, 2026 -
High max 8.7openSUSE-SU-2026:21159-1 3 CVEs
Security update for python-py7zr
This update for python-py7zr fixes the following issues: Changes in python-py7zr: - CVE-2026-23879: crafted malicious symbolic link chains in an archive can lead to an arbitrary file write (bsc#1268669) - CVE-2026-55195: unchecked extraction size can cause a …
first Jun 25, 2026 -
Critical max 9.6openSUSE-SU-2026:21157-1 1 CVE
Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615)
first Jun 25, 2026 -
High max 7.3openSUSE-SU-2026:21155-1 1 CVE
Security update for hamlib
This update for hamlib fixes the following issues: Changes in hamlib: - Update to 4.7.2: * Fix IC-7600/IC-7610 clock commands * Icom: Add CWR to modes eligible for DSP filtering * Kenwood: New model Hamgeek uSGX * Various fixes for Skywatcher, DX-SR8, FT-710,…
first Jun 23, 2026 -
High max 8.1openSUSE-SU-2026:21154-1 16 CVEs
Security update for ofono
This update for ofono fixes the following issues: Changes in ofono: - Reference the tracking bugs for the SMS/STK/USSD decoder security fixes applied upstream across the 2.14-2.17 updates: * SMS decoder stack buffer overflows: CVE-2023-2794 (boo#1218292), CVE…
first Jun 23, 2026 -
UnscoredopenSUSE-SU-2026:21153-1 4 CVEs
Security update for xar
This update for xar fixes the following issues: Changes in xar: - Switch to the maintained Apple xar lineage (build 503, versioned 1.8.0.0.503): the mackyle 1.6.1 fork this package tracked has been dead since 2012, and Debian, Fedora and Gentoo all moved to A…
first Jun 23, 2026 -
High max 8.8openSUSE-SU-2026:21152-1 1 CVE
Security update for atril
This update for atril fixes the following issues: Changes in atril: - Update to version 1.28.4 (bsc#1265880 CVE-2026-46519): * Build fixes * Fix tests imported from XReader * Fix tests with AT-SPI2 >= 2.53 * Improve search system * pdf: Always use poppler_doc…
first Jun 23, 2026 -
Critical max 9.6openSUSE-SU-2026:21151-1 5 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated go-jose to fix CVE-2026-34986 (bsc#1262810) - chi is fixed in the upstream project - updating to v4.7.0 with following security fixes * fixed CVE-2026-39821 (bsc#1266483) * …
first Jun 23, 2026 -
High max 7.5openSUSE-SU-2026:21149-1 6 CVEs
Security update for bitcoin
This update for bitcoin fixes the following issues: Changes in bitcoin: - Reference the tracking bugs for CVEs already fixed in current bitcoin (the affected versions all predate the shipped release): * CVE-2018-20587 (boo#1125092) * CVE-2019-15947 (boo#11497…
first Jun 23, 2026 -
Medium max 6.5openSUSE-SU-2026:21146-1 1 CVE
Security update for lldpd
This update for lldpd fixes the following issues: Changes in lldpd: - Update to version 1.0.22 * Fix CVE-2026-46433, out-of-bound read access when removing VLAN tag (#787). * Reject 0-length management address in LLDP. * Fix race condition when creating the c…
first Jun 22, 2026 -
Medium max 5.4openSUSE-SU-2026:21145-1 3 CVEs
Security update for mbedtls-2
This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - Enable SRTP and DTLS protocols needed by some software. - Update to version 2.28.10: Default behavior changes * In TLS clients, if mbedtls_ssl_set_hostname() has not been called, mb…
first Jun 22, 2026 -
Critical max 9.8openSUSE-SU-2026:21144-1 15 CVEs
Security update for mbedtls
This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to 3.6.6 (LTS maintenance update from 3.6.1); security fixes accumulated across the 3.6.2-3.6.6 releases: * CVE-2024-49195 (boo#1231708): buffer underrun in pkwrite when writing …
first Jun 22, 2026 -
Medium max 5.6openSUSE-SU-2026:21143-1 3 CVEs
Security update for gleam
This update for gleam fixes the following issues: Changes in gleam: - Update to 1.17.0: * Fixed security vulnerabilities: - Restrict custom documentation page `path` and `source` values so `gleam docs build` cannot escape the docs output directory or project …
first Jun 23, 2026 -
Critical max 9.8openSUSE-SU-2026:21142-1 1 CVE
Security update for perl-Compress-Raw-Zlib
This update for perl-Compress-Raw-Zlib fixes the following issues: Changes in perl-Compress-Raw-Zlib: - updated to 2.222 see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes 2.222 27 February 2026 * Add SECURITY.md. Fixes #40 * Fix spelling typos 2.221 …
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:21140-1 3 CVEs
Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues: Changes in perl-Cpanel-JSON-XS: - updated to 4.420.0 (4.42) see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.42 2026-06-27 (rurban) - Ensure encode with a type spec hashref does not chan…
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:21137-1 1 CVE
Security update for perl-Crypt-PasswdMD5
This update for perl-Crypt-PasswdMD5 fixes the following issues: Changes in perl-Crypt-PasswdMD5: - updated to 1.430.0 (1.43) see /usr/share/doc/packages/perl-Crypt-PasswdMD5/Changelog.ini [V 1.43] Date=2026-05-23T08:14:00 Deploy.Action=Upgrade Deploy.Reason=…
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21136-1 3 CVEs
Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - Update to version 0.28.1 (jsc#PED-13285): * Improved performance of inhibition rules when using Equal labels. * Improve the d…
first Jun 18, 2026 -
Medium max 5.1openSUSE-SU-2026:21134-1 2 CVEs
Security update for glycin-loaders
This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). - CVE-2025-58160: tracing-subscr…
first Jun 20, 2026 -
Medium max 4.3openSUSE-SU-2026:21130-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
High max 8.8openSUSE-SU-2026:21129-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 20, 2026 -
Low max 3.4openSUSE-SU-2026:21127-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jun 20, 2026 -
High max 7.5openSUSE-SU-2026:21126-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jun 20, 2026 -
High max 7.5openSUSE-SU-2026:21125-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit (bsc#1267857).
first Jun 20, 2026 -
High max 7.3openSUSE-SU-2026:21124-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 20, 2026 -
High max 7.5openSUSE-SU-2026:21123-1 6 CVEs
Security update for bind
This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#12655…
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21122-1 7 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21121-1 7 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026