35,648 results · Feed
-
Medium max 5.5SUSE-SU-2026:22263-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:22260-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
UnscoredSUSE-SU-2026:22259-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issues - Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/ * rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist() * rpcbind: Stop unauthenti…
first Jun 22, 2026 -
Medium max 6.5SUSE-SU-2026:22258-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:22257-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
Critical max 9.4openSUSE-SU-2026:21072-1 7 CVEs
Security update for trivy
This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption (bsc#1267268). - CVE-2026…
first Jun 26, 2026 -
High max 8.1openSUSE-SU-2026:21057-1 2 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). - CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).
first Jun 25, 2026 -
High max 7.1openSUSE-SU-2026:21055-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135).
first Jun 25, 2026 -
High max 7.5openSUSE-SU-2026:21054-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.722.gdd9d67ff5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jun 24, 2026 -
Medium max 4.0openSUSE-SU-2026:21047-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Critical max 9.6openSUSE-SU-2026:21043-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. …
first Jun 24, 2026 -
Medium max 4.3openSUSE-SU-2026:21036-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Non security issue: - Update to version 3.0.5 (jsc#SLE-23879).
first Jun 22, 2026 -
Medium max 5.5openSUSE-SU-2026:21032-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Critical max 9.8openSUSE-SU-2026:21029-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
Medium max 4.7openSUSE-SU-2026:21028-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
Medium max 6.3openSUSE-SU-2026:21025-1 1 CVE
Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass (bsc#1264265). Changes for keylime: - Update to version 7.14.2.
first Jun 22, 2026 -
High max 8.7openSUSE-SU-2026:20998-1 2 CVEs
Security update for tree-sitter-ruby
This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js (bsc#1244345). - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass (bsc#1250517)…
first Jun 22, 2026 -
Medium max 4.1openSUSE-SU-2026:20993-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669).
first Jun 20, 2026 -
High max 7.3openSUSE-SU-2026:20992-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
first Jun 20, 2026 -
Critical max 9.1openSUSE-RU-2026:21160-1 4 CVEs
Recommended update for dnscrypt-proxy
This update for dnscrypt-proxy fixes the following issues: Changes in dnscrypt-proxy: - Update to version 2.1.16 * The "tls_cipher_suite" option is now a no-op. Modern TLS stacks no longer expose cipher suite selection in a meaningful way, and the option had …
first Jun 25, 2026 -
Medium max 6.8SUSE-SU-2026:22293-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
Medium max 5.0SUSE-SU-2026:22289-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:22288-1 6 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 26, 2026 -
Medium max 6.9SUSE-SU-2026:22271-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Low max 2.1SUSE-SU-2026:22256-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
Medium max 5.9SUSE-SU-2026:22255-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026 -
High max 7.2SUSE-SU-2026:22254-1 1 CVE
Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit() (bsc#1263898).
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:22251-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21173-1 2 CVEs
Security update for python-pydata-sphinx-theme
This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - Refresh js dependencies: * ws to 7.5.11 (bsc#1268957, CVE-2026-48779) - Refresh vendored tarball (CVE-2026-6321, bsc#1264374)
first Jun 29, 2026 -
Medium max 5.0openSUSE-SU-2026:21171-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-40917: plug-ins: Clean up ICNS file loading (bsc#1262199).
first Jun 29, 2026 -
High max 8.2openSUSE-SU-2026:21076-1 1 CVE
Security update for giflib
This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
first Jun 28, 2026 -
High max 8.1SUSE-SU-2026:2668-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: xen: x86 HVM I/O port list traversal (XSA-491) (bsc#1266952). - CVE-2026-42488: xen: x86: mismatched mapcache metadata (XSA-494) (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: xen: domctl lock…
first Jun 29, 2026 -
Medium max 4.9openSUSE-SU-2026:21169-1 1 CVE
Security update for python-biopython
This update for python-biopython fixes the following issues: Changes in python-biopython: - CVE-2025-68463: Fixed a information disclosure caused by a XXE vulnerability (boo#1255465).
first Jun 29, 2026 -
Critical max 9.8openSUSE-SU-2026:21168-1 56 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 (bsc#1268071) * CVE-2026-12289 (bmo#2023443) Privilege escalation in the Graphics: WebRender component * CVE-2026-122…
first Jun 29, 2026 -
Medium max 5.5openSUSE-SU-2026:21166-1 3 CVEs
Security update for nano
This update for nano fixes the following issues: Changes in nano: - Update to version 9.1: * When searching, the viewport is placed snug left where possible. * The ability to read and write files in old Mac format (a lone carriage return as line ending) was r…
first Jun 29, 2026 -
High max 8.3openSUSE-SU-2026:21163-1 3 CVEs
Security update for yt-dlp
This update for yt-dlp fixes the following issues: Changes in yt-dlp: - Update to version 2026.06.09 * Fixed [CVE-2026-50019]: File Downloader cookie leak with curl * Fixed [CVE-2026-50023]: Dangerous file type creation via insufficient filename sanitization …
first Jun 29, 2026 -
Medium max 6.8openSUSE-SU-2026:21075-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jun 28, 2026 -
Low max 2.3openSUSE-SU-2026:21074-1 1 CVE
Security update for loupe
This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation (bsc#1249009). Changes for loupe: - Update to version 48.2: - Check if the is-hidden prope…
first Jun 28, 2026 -
High max 8.1openSUSE-SU-2026:11151-1 1 CVE
socat-1.8.1.3-1.1 on GA media
These are all security issues fixed in the socat-1.8.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
Critical max 9.1openSUSE-SU-2026:11150-1 1 CVE
skopeo-1.23.0-1.1 on GA media
These are all security issues fixed in the skopeo-1.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026