35,648 results · Feed
-
Critical max 10.0openSUSE-SU-2026:21120-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
Critical max 9.1openSUSE-SU-2026:21119-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via send_file() (bsc#1266370).
first Jun 20, 2026 -
High max 8.8openSUSE-SU-2026:21118-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459).
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21117-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …
first Jun 20, 2026 -
High max 8.8openSUSE-SU-2026:21116-1 11 CVEs
Security update for freerdp
This update for freerdp fixes the following issues Update to version 3.26.0: - CVE-2026-33982: heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc() (bsc#1261222). - CVE-2026-33985: FreeRDP: Information …
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21115-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
High max 7.3openSUSE-SU-2026:21114-1 1 CVE
Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
first Jun 20, 2026 -
High max 7.5openSUSE-SU-2026:21113-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 20, 2026 -
High max 7.4openSUSE-SU-2026:21109-1 5 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues - CVE-2026-27851: lib-var-expand: safe filter leaks to all following pipelines (bsc#1265146). - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-4001…
first Jun 19, 2026 -
UnscoredopenSUSE-SU-2026:21112-1 0 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB …
first Jun 19, 2026 -
High max 8.4openSUSE-SU-2026:21111-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant (DAG) flow (bsc#1266662). Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: * Update cargo vet audits …
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:21108-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
first Jun 19, 2026 -
High max 8.1openSUSE-SU-2026:21107-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).
first Jun 19, 2026 -
High max 8.4openSUSE-SU-2026:21106-1 1 CVE
Security update for papers
This update for papers fixes the following issues Security issue: - CVE-2026-46529: command injection (bsc#1265880). Changes for papers: - Update to version 48.10 (bsc#1265880): - Update to version 48.9 (jsc#PED-15957, bsc#1261947): - Bug fixes: - Saved image…
first Jun 19, 2026 -
High max 8.8openSUSE-SU-2026:21104-1 9 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 8.8openSUSE-SU-2026:21103-1 8 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 8.8openSUSE-SU-2026:21102-1 8 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:21101-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 19, 2026 -
High max 7.3openSUSE-SU-2026:21100-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
first Jun 19, 2026 -
Medium max 6.9openSUSE-SU-2026:21098-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:21097-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issue - CVE-2026-11332: argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).
first Jun 19, 2026 -
High max 8.8openSUSE-SU-2026:21096-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.4openSUSE-SU-2026:21095-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026 -
High max 8.2openSUSE-SU-2026:21093-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21092-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
first Jun 18, 2026 -
High max 7.4openSUSE-SU-2026:21091-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 18, 2026 -
High max 7.8openSUSE-SU-2026:21090-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21088-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
Critical max 10.0openSUSE-SU-2026:21084-1 16 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Pun…
first Jun 18, 2026 -
Critical max 9.1openSUSE-SU-2026:21083-1 11 CVEs
Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…
first Jun 18, 2026 -
Critical max 10.0openSUSE-SU-2026:21079-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 17, 2026 -
Medium max 5.3openSUSE-SU-2026:21078-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:21071-1 32 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues Security issues: - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: Denial of Serv…
first Jun 26, 2026 -
Medium max 5.0openSUSE-SU-2026:21070-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Critical max 10.0openSUSE-SU-2026:21069-1 15 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-39821: golang.org/x/net/idna: failure to rejec…
first Jun 26, 2026 -
High max 7.7openSUSE-SU-2026:21067-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 7.5openSUSE-SU-2026:21066-1 4 CVEs
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling (bsc#1268506). - CVE-2026-53538: urlencoded requests containing semicolons can lead to fo…
first Jun 26, 2026 -
Medium max 6.1openSUSE-SU-2026:21063-1 1 CVE
Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve
This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version (bsc#1268243) Changes…
first Jun 26, 2026 -
Medium max 6.3openSUSE-SU-2026:21062-1 2 CVEs
Security update for capnproto
This update for capnproto fixes the following issues: Update to version 1.4.0. Security issues fixed: - CVE-2026-32239: negative `Content-Length` conversion treated as impossibly large length by KJ-HTTP can lead to HTTP smuggling (bsc#1259638). - CVE-2026-322…
first Jun 26, 2026 -
High max 7.6openSUSE-SU-2026:21061-1 4 CVEs
Security update for libaom
This update for libaom fixes the following issues - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-plane pixel values ca…
first Jun 25, 2026