35,648 results · Feed
-
High max 8.1SUSE-SU-2026:1216-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 8, 2026 -
High max 7.2SUSE-SU-2026:20954-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 1, 2026 -
High max 7.2SUSE-SU-2026:20960-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 1, 2026 -
Medium max 6.0SUSE-SU-2026:20951-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting (bsc#1257181). - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
first Mar 31, 2026 -
Medium max 4.1SUSE-SU-2026:20959-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 1, 2026 -
High max 7.5SUSE-SU-2026:20950-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 27, 2026 -
High max 8.8SUSE-SU-2026:1185-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.19 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 3, 2026 -
High max 7.8SUSE-SU-2026:1180-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 3, 2026 -
Medium max 6.0SUSE-SU-2026:20956-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting (bsc#1257181). - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
first Mar 31, 2026 -
Medium max 4.1SUSE-SU-2026:20955-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 1, 2026 -
Medium max 5.4SUSE-SU-2026:1095-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1…
first Apr 7, 2026 -
Medium max 5.4SUSE-SU-2026:0910-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1…
first Apr 7, 2026 -
Critical max 9.8
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23 * GO-202…
first Apr 7, 2026 -
High max 8.1SUSE-SU-2026:1203-1 20 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446). - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack …
first Apr 7, 2026 -
Medium max 6.3openSUSE-SU-2026:10499-1 1 CVE
python311-social-auth-app-django-5.7.0-1.1 on GA media
These are all security issues fixed in the python311-social-auth-app-django-5.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
Critical max 9.8openSUSE-SU-2026:10498-1 10 CVEs
libeverest-3.6.6-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 7.5openSUSE-SU-2026:10497-1 1 CVE
heroic-games-launcher-2.20.1-5.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
Medium max 5.1openSUSE-SU-2026:10496-1 1 CVE
git-cliff-2.12.0-1.1 on GA media
These are all security issues fixed in the git-cliff-2.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 8.9openSUSE-SU-2026:10495-1 1 CVE
ckermit-9.0.302-20.1 on GA media
These are all security issues fixed in the ckermit-9.0.302-20.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 7.1openSUSE-SU-2026:10494-1 1 CVE
SDL2_image-devel-2.8.10-1.1 on GA media
These are all security issues fixed in the SDL2_image-devel-2.8.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 7.0SUSE-SU-2026:1206-1 4 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3644: incomplete control character vali…
first Apr 7, 2026 -
High max 8.1SUSE-SU-2026:1202-1 23 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…
first Apr 7, 2026 -
High max 8.1SUSE-SU-2026:1201-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead t…
first Apr 7, 2026 -
Critical max 9.1SUSE-SU-2026:1200-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)
first Apr 7, 2026 -
High max 7.5SUSE-SU-2026:1199-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 7, 2026 -
Critical max 9.1SUSE-SU-2026:1198-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)
first Apr 7, 2026 -
Critical max 9.1SUSE-SU-2026:1197-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)
first Apr 7, 2026 -
Critical max 9.1SUSE-SU-2026:1195-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 7, 2026 -
Critical max 9.1SUSE-SU-2026:1194-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 7, 2026 -
High max 7.8SUSE-SU-2026:1193-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-4150: PSD File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1259979). - CVE-2026-4153: PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#125998…
first Apr 7, 2026 -
High max 7.2SUSE-SU-2026:1192-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 7, 2026 -
Medium max 6.5SUSE-SU-2026:1191-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 6, 2026 -
High max 7.8SUSE-SU-2026:1189-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 5, 2026 -
High max 8.8SUSE-SU-2026:1188-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregist…
first Apr 5, 2026 -
High max 7.8SUSE-SU-2026:1187-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter…
first Apr 5, 2026 -
High max 7.1openSUSE-SU-2026:10493-1 1 CVE
SDL3_image-devel-3.4.2-1.1 on GA media
These are all security issues fixed in the SDL3_image-devel-3.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 5, 2026 -
Critical max 9.8openSUSE-SU-2026:20459-1 2 CVEs
Security update for perl-XML-Parser
This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in `parse_stream` when processing UTF-8 input streams (bsc#1259901). - CVE-2006-10003: off-by-one heap buffer overflow in `st_serial_stack` (bsc#1259902).
first Apr 1, 2026 -
High max 8.6openSUSE-SU-2026:20458-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. (bsc#1258125)
first Apr 1, 2026 -
Critical max 9.8openSUSE-SU-2026:10491-1 3 CVEs
python311-scitokens-1.8.1-2.1 on GA media
These are all security issues fixed in the python311-scitokens-1.8.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
Low max 2.7openSUSE-SU-2026:10490-1 1 CVE
python311-aiohttp-3.13.5-2.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.13.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026