35,648 results · Feed
-
Critical max 9.1openSUSE-SU-2026:11023-1 14 CVEs
libopenssl-3-devel-3.5.3-6.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.5.3-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Medium max 5.0openSUSE-SU-2026:11022-1 2 CVEs
opensc-0.27.1-2.1 on GA media
These are all security issues fixed in the opensc-0.27.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Medium max 6.5
python311-starlette-1.2.0-1.1 on GA media
These are all security issues fixed in the python311-starlette-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
High max 7.4openSUSE-SU-2026:11024-1 5 CVEs
python311-PyJWT-2.13.0-1.1 on GA media
These are all security issues fixed in the python311-PyJWT-2.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
High max 7.3openSUSE-SU-2026:11021-1 1 CVE
kitty-0.47.3-1.1 on GA media
These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
High max 7.5openSUSE-SU-2026:11020-1 1 CVE
freeipmi-1.6.18-1.1 on GA media
These are all security issues fixed in the freeipmi-1.6.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
High max 8.6openSUSE-SU-2026:20943-1 27 CVEs
Security update for java-17-openj9
This update for java-17-openj9 fixes the following issues: Changes in java-17-openj9: - Make post scripts less noisy (bsc#1267355) - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 17…
first Jun 11, 2026 -
Medium max 4.8openSUSE-SU-2026:20942-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update apptainer to version v1.5.1 * Security fix (bsc#1267982): Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path matching for limit container paths directive. This is o…
first Jun 10, 2026 -
Critical max 9.6openSUSE-SU-2026:20940-1 24 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266600) - Update to version 11.6.14+security-04: Security: * CVE-2026…
first Jun 10, 2026 -
High max 7.3openSUSE-SU-2026:20938-1 1 CVE
Security update for perl-YAML-Syck
This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - CVE-2026-5089: prevent buffer underflow in base60 (sexagesimal) parsing (PR #133) (bsc#1265155).
first Jun 10, 2026 -
Low max 3.1openSUSE-SU-2026:20937-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-6873: Signed cookie salt namespace collision (bsc#1267578) - CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend (bsc#1267579) …
first Jun 10, 2026 -
High max 7.5openSUSE-SU-2026:20936-1 2 CVEs
Security update for perl-CryptX
This update for perl-CryptX fixes the following issues: Changes in perl-CryptX: - updated to 0.89.0 (0.089) see /usr/share/doc/packages/perl-CryptX/Changes 0.089 2026-05-10 - new: Crypt::ASN1 - new: Crypt::AuthEnc::SIV - new: Crypt::AuthEnc::XChaCha20Poly1305…
first Jun 10, 2026 -
Medium max 6.8openSUSE-SU-2026:20934-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jun 10, 2026 -
Critical max 10.0openSUSE-SU-2026:20933-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on l…
first Jun 10, 2026 -
Low max 3.3openSUSE-SU-2026:20931-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
Critical max 9.6SUSE-SU-2026:22075-1 9 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-operator: - Changes on top of v1.7.5…
first Jun 10, 2026 -
Critical max 10.0SUSE-SU-2026:22074-1 19 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to v2.2.9: * 0e33b2…
first Jun 10, 2026 -
High max 8.4SUSE-SU-2026:22073-1 2 CVEs
Security update for libzypp
This update for libzypp fixes the following issues Version 17.38.13 (35): - CVE-2026-44941: path traversal via "keyhint" (bsc#1267426). - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks (bsc#1267874).
first Jun 9, 2026 -
High max 7.3SUSE-SU-2026:22072-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 9, 2026 -
Medium max 5.9SUSE-SU-2026:22068-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issue - CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).
first Jun 4, 2026 -
Low max 2.7SUSE-SU-2026:22067-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-35388: Added missing askpass check for proxy-mode multiplexing sessions (bsc#1261441) - CVE-2026-3497: Fixed a possible information disclosure or denial of service due to uninitialized variables i…
first Jun 4, 2026 -
Critical max 9.6SUSE-SU-2026:22066-1 9 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-operator: - Fix substitution - Fix r…
first Jun 10, 2026 -
Medium max 6.5SUSE-SU-2026:22064-1 1 CVE
Security update for libzypp
This update for libzypp fixes the following issue Update to 17.38.13 (35): - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks (bsc#1267874).
first Jun 9, 2026 -
High max 7.3SUSE-SU-2026:22063-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 9, 2026 -
High max 8.4SUSE-SU-2026:22062-1 1 CVE
Security update for libzypp
This update for libzypp fixes the following issue Version 17.38.12 (35): - CVE-2026-44941: path traversal via "keyhint" (bsc#1267426).
first Jun 8, 2026 -
Medium max 5.3SUSE-SU-2026:22071-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 5, 2026 -
Medium max 4.0SUSE-SU-2026:22070-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jun 5, 2026 -
UnscoredSUSE-SU-2026:22069-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issues Update to rpcbind 1.2.9: Security issue: - Fix several memory leaks and buffer overflows (bsc#1267212). Non security issue: - rpcbind fails to start (tumbleweed snapshot 20181120) (bsc#1117217). Changes: * rp…
first Jun 4, 2026 -
Critical max 10.0SUSE-SU-2026:22065-1 19 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to version 2.1.6: *…
first Jun 10, 2026 -
Medium max 5.3SUSE-SU-2026:22061-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 5, 2026 -
Medium max 5.5SUSE-SU-2026:22060-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 4, 2026 -
Low max 3.3SUSE-SU-2026:22058-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796).
first Jun 9, 2026 -
High max 8.8openSUSE-SU-2026:20949-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: Changes in wicked: - Update to version 0.6.79 - Fix an indirect remote shell command injection via unsanitized dhcp strings and leaseinfo dump (bsc#1265221,CVE-2026-44932): - Fix to escape single-quotes in le…
first Jun 12, 2026 -
Low max 2.9openSUSE-SU-2026:20948-1 1 CVE
Security update for enc
This update for enc fixes the following issues: Changes in enc: - CVE-2026-1229: Fix incorrect value (bsc#1265533) Bump circl to 1.6.3 - Update to 1.1.5: * Update dependencies #10 - Update to 1.1.4: * Update all dependencies #9
first Jun 12, 2026 -
High max 8.3openSUSE-SU-2026:11019-1 3 CVEs
python313-yt-dlp-2026.06.09-1.1 on GA media
These are all security issues fixed in the python313-yt-dlp-2026.06.09-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.8openSUSE-SU-2026:11017-1 1 CVE
perl-GD-2.860.0-1.1 on GA media
These are all security issues fixed in the perl-GD-2.860.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
High max 8.6openSUSE-SU-2026:20947-1 28 CVEs
Security update for java-21-openj9
This update for java-21-openj9 fixes the following issues: Changes in java-21-openj9: - Make post scripts less noisy (bsc#1267355) - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 21…
first Jun 12, 2026 -
High max 8.8openSUSE-SU-2026:11018-1 1 CVE
wicked-0.6.79-1.1 on GA media
These are all security issues fixed in the wicked-0.6.79-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
High max 7.5openSUSE-SU-2026:11009-1 1 CVE
ffmpeg-7-7.1.4-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.6
chromedriver-149.0.7827.102-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.102-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026