35,648 results · Feed
-
Medium max 6.6openSUSE-SU-2026:20952-1 1 CVE
Security update for python-python-dotenv
This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewriting `.env` files, allowing a local attacker to overwrite arbitrary files …
first Jun 11, 2026 -
Medium max 5.5SUSE-SU-2026:22090-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Jun 8, 2026 -
Critical max 9.8openSUSE-SU-2026:20962-1 2 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd (bsc#1251788) Remove var-run.mount from Requires and After - update to version 3.8.6 (bugfix rel…
first Jun 12, 2026 -
Medium max 5.5openSUSE-SU-2026:20961-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).
first Jun 12, 2026 -
Medium max 6.8SUSE-SU-2026:22096-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jun 10, 2026 -
Critical max 10.0SUSE-SU-2026:22095-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on l…
first Jun 10, 2026 -
Low max 3.3SUSE-SU-2026:22093-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
Medium max 4.4SUSE-SU-2026:22091-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026 -
High max 7.5SUSE-SU-2026:22085-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
High max 7.6SUSE-SU-2026:22082-1 5 CVEs
Security update for erlang
This update for erlang fixes the following issues - CVE-2025-4748: improper limitation of a pathname may lead to path traversal (bsc#1244642). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc…
first Jun 5, 2026 -
High max 7.5SUSE-SU-2026:22081-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 5, 2026 -
Critical max 9.0SUSE-SU-2026:22080-1 6 CVEs
Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…
first Jun 5, 2026 -
High max 8.8SUSE-SU-2026:22077-1 11 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 4, 2026 -
Medium max 4.3SUSE-SU-2026:22088-1 2 CVEs
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: - CVE-2026-33929: path traversal in the `ExtractEmbeddedFiles` example code can lead to arbitrary file writes (bsc#1262046). Other updates and bugfixes:…
first Jun 8, 2026 -
Low max 3.3SUSE-SU-2026:22086-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)
first Jun 5, 2026 -
Critical max 9.8SUSE-SU-2026:22076-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Low max 2.3openSUSE-SU-2026:11039-1 1 CVE
libvinylapi3-9.0.1-1.1 on GA media
These are all security issues fixed in the libvinylapi3-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 7.8openSUSE-SU-2026:11038-1 1 CVE
stgit-2.6.0-1.1 on GA media
These are all security issues fixed in the stgit-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 6.3openSUSE-SU-2026:11037-1 2 CVEs
quickjs-20260604-1.1 on GA media
These are all security issues fixed in the quickjs-20260604-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 5.3openSUSE-SU-2026:11036-1 1 CVE
python311-zeroconf-0.149.16-1.1 on GA media
These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 6.9openSUSE-SU-2026:11035-1 1 CVE
python311-aiosmtplib-5.1.1-1.1 on GA media
These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 7.5openSUSE-SU-2026:11034-1 3 CVEs
perl-Crypt-PBKDF2-0.261630-1.1 on GA media
These are all security issues fixed in the perl-Crypt-PBKDF2-0.261630-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 8.7openSUSE-SU-2026:11033-1 18 CVEs
netty-4.1.135-1.1 on GA media
These are all security issues fixed in the netty-4.1.135-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 7.5openSUSE-SU-2026:11032-1 1 CVE
google-osconfig-agent-20260611.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260611.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Critical max 10.0openSUSE-SU-2026:11031-1 4 CVEs
google-guest-agent-20260529.00-2.1 on GA media
These are all security issues fixed in the google-guest-agent-20260529.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Medium max 5.1openSUSE-SU-2026:11030-1 1 CVE
crun-1.28-1.1 on GA media
These are all security issues fixed in the crun-1.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
High max 7.5SUSE-SU-2026:2402-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 15, 2026 -
Critical max 9.9SUSE-SU-2026:2401-1 7 CVEs
Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues Update to version 1.6.6, fixes various go embedded security issues: - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251420). - CVE-…
first Jun 15, 2026 -
Critical max 9.9SUSE-SU-2026:2400-1 7 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: Update to version 1.7.4, fixes various go embedded security issues: - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251420). - CVE-202…
first Jun 15, 2026 -
High max 8.8SUSE-SU-2026:2399-1 7 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: N…
first Jun 15, 2026 -
High max 8.8SUSE-SU-2026:2397-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 15, 2026 -
High max 8.8SUSE-SU-2026:2396-1 7 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: N…
first Jun 15, 2026 -
High max 7.5SUSE-SU-2026:2395-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…
first Jun 15, 2026 -
High max 7.8SUSE-SU-2026:2394-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 15, 2026 -
Critical max 9.1SUSE-SU-2026:2393-1 9 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 15, 2026 -
High max 8.8SUSE-SU-2026:2392-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Hea…
first Jun 15, 2026 -
Critical max 9.6openSUSE-SU-2026:11029-1 28 CVEs
chromedriver-149.0.7827.114-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.114-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 14, 2026 -
Low max 2.3openSUSE-SU-2026:11028-1 1 CVE
librav1e0_8-0.8.1-2.1 on GA media
These are all security issues fixed in the librav1e0_8-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
High max 7.7openSUSE-SU-2026:11027-1 3 CVEs
python311-tornado6-6.5.7-1.1 on GA media
These are all security issues fixed in the python311-tornado6-6.5.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Critical max 9.8openSUSE-SU-2026:11025-1 3 CVEs
python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026