35,648 results · Feed
-
Critical max 9.6SUSE-OU-2016:2857-1 1 CVE
Add headmore to SUSE PackageHub
This update makes headmore available in the SUSE Package Hub. headmore is a VNC client for character terminals.
first Nov 5, 2016 -
Critical max 9.6openSUSE-SU-2026:11071-1 33 CVEs
chromedriver-149.0.7827.155-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 20, 2026 -
High max 8.7openSUSE-SU-2026:11065-1 6 CVEs
freerdp-3.27.1-1.1 on GA media
These are all security issues fixed in the freerdp-3.27.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:11070-1 1 CVE
warewulf4-4.7.0-2.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Medium max 4.0openSUSE-SU-2026:11069-1 1 CVE
squid-7.6-1.1 on GA media
These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Critical max 9.1openSUSE-SU-2026:11068-1 5 CVEs
python311-3.11.15-6.1 on GA media
These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Medium max 5.3openSUSE-SU-2026:11067-1 1 CVE
python311-joserfc-1.7.1-1.1 on GA media
These are all security issues fixed in the python311-joserfc-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 8.1openSUSE-SU-2026:11066-1 3 CVEs
nginx-1.31.2-1.1 on GA media
These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11064-1 1 CVE
ansible-core-2.20-2.20.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.20-2.20.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11062-1 1 CVE
ansible-core-2.18-2.18.18-1.1 on GA media
These are all security issues fixed in the ansible-core-2.18-2.18.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.8openSUSE-SU-2026:11063-1 1 CVE
ansible-core-2.19-2.19.11-1.1 on GA media
These are all security issues fixed in the ansible-core-2.19-2.19.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.5openSUSE-SU-2026:11061-1 25 CVEs
ImageMagick-7.1.2.25-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
High max 7.1SUSE-SU-2026:2472-1 2 CVEs
Security update for apache-sshd, jpgpj
This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability (bsc#1239551). - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git (bsc#1267018). Changes …
first Jun 19, 2026 -
Critical max 10.0SUSE-SU-2026:2468-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 19, 2026 -
Critical max 9.6SUSE-SU-2026:2466-1 5 CVEs
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect results returned from Rows.Scan (bsc#1247720). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validati…
first Jun 19, 2026 -
Critical max 9.1SUSE-SU-2026:2464-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues Security issues: - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-478…
first Jun 19, 2026 -
High max 8.2SUSE-SU-2026:2462-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 19, 2026 -
Critical max 10.0SUSE-SU-2026:2467-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:2465-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-4046: Use pending character state in IBM1390, IBM1399 character sets (bsc#1261206, BZ #33980)
first Jun 19, 2026 -
High max 8.6SUSE-SU-2026:2463-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues Update ovn to 25.03.3: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 19, 2026 -
High max 8.2SUSE-SU-2026:2461-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 19, 2026 -
High max 8.7SUSE-SU-2026:2460-1 2 CVEs
Security update for kubernetes-old
This update for kubernetes-old fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265747). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in …
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2459-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712). - CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717). - CVE-2026-35330: i…
first Jun 18, 2026 -
High max 8.6SUSE-SU-2026:22145-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:22146-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 7.8openSUSE-SU-2026:11059-1 2 CVEs
lemon-3.53.2-2.1 on GA media
These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Low max 3.7openSUSE-SU-2026:11058-1 1 CVE
python311-starlette-1.3.1-1.1 on GA media
These are all security issues fixed in the python311-starlette-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11053-1 14 CVEs
alloy-1.17.0-1.1 on GA media
These are all security issues fixed in the alloy-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.1
kubevirt-1.8-container-disk-1.8.3-1.1 on GA media
These are all security issues fixed in the kubevirt-1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 7.5openSUSE-SU-2026:11056-1 1 CVE
inspektor-gadget-0.53.2-1.1 on GA media
These are all security issues fixed in the inspektor-gadget-0.53.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11055-1 29 CVEs
firefox-esr-140.12.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 8.3openSUSE-SU-2026:11054-1 1 CVE
containerized-data-importer-1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.8openSUSE-SU-2026:11052-1 40 CVEs
MozillaFirefox-152.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 8.4SUSE-SU-2026:2458-1 7 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251). - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001). - CVE-…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2457-1 4 CVEs
Security update for frr
This update for frr fixes the following issue: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2455-1 4 CVEs
Security update for frr
This update for frr fixes the following issues - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2453-1 7 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490). - CVE-2026-22013: unauthenticated attacker with network access can access to critical data (bsc#…
first Jun 18, 2026 -
UnscoredSUSE-SU-2026:2452-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
first Jun 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11060-1 3 CVEs
tinyproxy-1.11.3-3.1 on GA media
These are all security issues fixed in the tinyproxy-1.11.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:2454-1 4 CVEs
Security update for frr
This update for frr fixes the following issues Update to frr 8.5.7: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026…
first Jun 18, 2026