35,648 results · Feed
-
Critical max 9.2openSUSE-SU-2026:20503-1 2 CVEs
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…
first Apr 10, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…
first Apr 13, 2026 -
High max 8.2SUSE-SU-2026:21165-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature ve…
first Apr 10, 2026 -
Medium max 6.1SUSE-SU-2026:21159-1 1 CVE
Security update for python-gi-docgen
This update for python-gi-docgen fixes the following issues: - CVE-2025-11687: Fixed reflected DOM XSS (bsc#1251961)
first Apr 9, 2026 -
High max 7.5openSUSE-SU-2026:20581-1 1 CVE
Security update for nebula
This update for nebula fixes the following issues: Changes in nebula: - Update to version 1.10.3: * Fix an issue where blocklist bypass is possible when using curve P256 Any newly issued P256 based certificates will have their signature clamped to the low-s f…
first Apr 14, 2026 -
Medium max 6.1SUSE-SU-2026:21158-1 2 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in …
first Apr 9, 2026 -
Critical max 9.8SUSE-SU-2026:21157-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.9.1 ESR (bsc#1261663). - MFSA 2026-27: * CVE-2026-5731: memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, F…
first Apr 9, 2026 -
High max 8.1SUSE-SU-2026:21153-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18
first Apr 9, 2026 -
High max 7.5openSUSE-SU-2026:20537-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Apr 14, 2026 -
Medium max 4.1SUSE-SU-2026:21143-1 1 CVE
Security update for tar
This update for tar fixes the following issue: Security issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Non security issue: - Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
first Apr 7, 2026 -
High max 8.7openSUSE-SU-2026:20528-1 1 CVE
Security update for Botan
This update for Botan fixes the following issues: - CVE-2026-34582: Fixed a client authentication bypass in TLS 1.3 implementation (bsc#1261880)
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21151-1 2 CVEs
Security update for zlib
This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…
first Apr 9, 2026 -
Medium max 6.5SUSE-SU-2026:21145-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: use Crypt:URandom for generating nonces (bsc#1246623)
first Apr 9, 2026 -
Critical max 9.8openSUSE-SU-2026:20578-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation (bsc#1261729) - CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin (bsc#1261731) - CVE-2026-4292:…
first Apr 13, 2026 -
Medium max 6.7SUSE-SU-2026:21144-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Medium max 6.5openSUSE-SU-2026:20536-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:21142-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Apr 7, 2026 -
Critical max 9.8openSUSE-SU-2026:20574-1 7 CVEs
Security update for libraw
This update for libraw fixes the following issues: - CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read (bsc#1261499). - CVE-2026-20884: integer overflow vulnerability in the deflate_dng_load_raw (bsc#1261671). - CVE-2026-20889: heap-based b…
first Apr 20, 2026 -
High max 8.7SUSE-SU-2026:21141-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issue: Update cockpit-packages to version 4: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (…
first Apr 7, 2026 -
High max 7.5openSUSE-SU-2026:20547-1 2 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access (bsc#1257359). - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472). Changes for strongswan: - Fixed a vulne…
first Apr 16, 2026 -
High max 8.5SUSE-SU-2026:21140-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 7, 2026 -
High max 8.7openSUSE-SU-2026:20532-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 14, 2026 -
High max 7.6SUSE-SU-2026:21138-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…
first Apr 7, 2026 -
Medium max 5.9openSUSE-SU-2026:20566-1 1 CVE
Security update for Botan
This update for Botan fixes the following issue: - CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates (bsc#1261993).
first Apr 20, 2026 -
High max 7.5openSUSE-SU-2026:20550-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: - Update to release 9.20.21 - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence …
first Apr 16, 2026 -
Medium max 5.9SUSE-FU-2026:21213-1 1 CVE
Feature update for libgcrypt, libgpg-error
This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:21139-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-68131: CBORDecoder reuse across trust boundaries can lead to leak of shareable values from previous decode calls via attacker-controlled messages (bsc#1255783). - CVE-2026-26209: uncontrolled…
first Apr 7, 2026 -
Low max 2.9openSUSE-SU-2026:10595-1 1 CVE
php8-8.5.5-1.1 on GA media
These are all security issues fixed in the php8-8.5.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
High max 8.1openSUSE-SU-2026:10594-1 6 CVEs
openbao-2.5.3-1.1 on GA media
These are all security issues fixed in the openbao-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 6.8openSUSE-SU-2026:10593-1 1 CVE
openCryptoki-3.26.0-6.1 on GA media
These are all security issues fixed in the openCryptoki-3.26.0-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
UnscoredopenSUSE-SU-2026:20589-1 0 CVEs
Security update for tor
This update for tor fixes the following issues: Changes in tor: - update to 0.4.8.23: * Fix a memory compare using the wrong length. This could lead to a remote crash when using the conflux subsystem (TROVE-2026-004, boo#1262302) * Fix a series of defense in …
first Apr 20, 2026 -
Medium max 6.3openSUSE-SU-2026:10588-1 1 CVE
capnproto-1.4.0-2.1 on GA media
These are all security issues fixed in the capnproto-1.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Critical max 9.3openSUSE-SU-2026:10587-1 10 CVEs
calibre-9.7.0-1.1 on GA media
These are all security issues fixed in the calibre-9.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
High max 7.5openSUSE-SU-2026:10596-1 1 CVE
python-lxml-doc-6.1.0-1.1 on GA media
These are all security issues fixed in the python-lxml-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
High max 7.5openSUSE-SU-2026:10586-1 11 CVEs
ImageMagick-7.1.2.19-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.19-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Medium max 4.0openSUSE-SU-2026:10585-1 1 CVE
GraphicsMagick-1.3.46-6.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
High max 7.8SUSE-SU-2026:1531-1 1 CVE
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 21, 2026 -
Medium max 5.3openSUSE-SU-2026:10597-1 1 CVE
python311-python-multipart-0.0.26-1.1 on GA media
These are all security issues fixed in the python311-python-multipart-0.0.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
High max 7.0SUSE-SU-2026:1530-1 5 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: python: improper resource argument validation can allow path traversa…
first Apr 21, 2026 -
High max 7.8SUSE-SU-2026:1527-1 1 CVE
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 21, 2026