35,648 results · Feed
-
High max 8.8openSUSE-SU-2026:10489-1 2 CVEs
libinput-devel-1.31.1-1.1 on GA media
These are all security issues fixed in the libinput-devel-1.31.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
Critical max 9.6
chromedriver-146.0.7680.177-1.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
Low max 2.9openSUSE-SU-2026:10486-1 1 CVE
amazon-ssm-agent-3.3.4121.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.4121.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
High max 8.2openSUSE-SU-2026:10488-1 1 CVE
corosync-3.1.10-4.1 on GA media
These are all security issues fixed in the corosync-3.1.10-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
Low max 1.7openSUSE-SU-2026:10492-1 1 CVE
liblzma5-32bit-5.8.3-1.1 on GA media
These are all security issues fixed in the liblzma5-32bit-5.8.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2026 -
Medium max 5.3openSUSE-SU-2026:10485-1 3 CVEs
python311-Flask-Cors-6.0.2-1.1 on GA media
These are all security issues fixed in the python311-Flask-Cors-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2026 -
Critical max 9.1openSUSE-SU-2026:10484-1 1 CVE
k6-1.7.1-1.1 on GA media
These are all security issues fixed in the k6-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2026 -
Medium max 6.3openSUSE-SU-2026:10483-1 1 CVE
himmelblau-2.3.9+git0.a9fd29b-1.1 on GA media
These are all security issues fixed in the himmelblau-2.3.9+git0.a9fd29b-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2026 -
Medium max 4.3openSUSE-SU-2026:20451-1 2 CVEs
Security update for gnome-online-accounts, gvfs
This update for gnome-online-accounts, gvfs fixes the following issues: Changes for gvfs: Update gvfs to 1.59.90: - CVE-2026-28295: information disclosure when processing untrusted PASV responses from FTP servers (bsc#1258953). - CVE-2026-28296: arbitrary FTP…
first Mar 31, 2026 -
Medium max 5.9openSUSE-SU-2026:20449-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Security fixes: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected …
first Mar 30, 2026 -
Medium max 4.0openSUSE-SU-2026:20448-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 30, 2026 -
High max 8.8openSUSE-SU-2026:20447-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Update to versio 16.13. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 30, 2026 -
Medium max 5.3openSUSE-SU-2026:20446-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Critical max 9.6openSUSE-SU-2026:20444-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.52: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences…
first Mar 30, 2026 -
Medium max 6.9openSUSE-SU-2026:20441-1 3 CVEs
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786). - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#12…
first Mar 27, 2026 -
High max 8.9openSUSE-SU-2026:20438-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: g…
first Mar 27, 2026 -
Medium max 6.6openSUSE-SU-2026:20437-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
High max 8.4openSUSE-SU-2026:20433-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write (bsc#1259177).
first Mar 26, 2026 -
Medium max 5.9openSUSE-SU-2026:20432-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: Fixed denial of service (bsc#1251194)
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:20431-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issue: Update to PyJWT 2.12.1: - CVE-2026-32597: PyJWT accepts unknown `crit` header extensions (bsc#1259616). Changelog: Update to 2.12.1: - Add missing typing_extensions dependency for Python < 3.11 in #1150 …
first Mar 25, 2026 -
Critical max 10.0openSUSE-SU-2026:20439-1 38 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083): - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Gr…
first Mar 27, 2026 -
High max 7.5openSUSE-SU-2026:20452-1 2 CVEs
Security update for kea
This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert (bsc#1252863). - CVE-2026-3608: stack overflow via maliciously crafted message (bsc#1260380). Changelog: * A large number of bracket pairs in a …
first Apr 1, 2026 -
High max 7.5openSUSE-SU-2026:20456-1 1 CVE
Security update for tinyproxy
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - CVE-2026-3945: Fixed denial of service by unauthenticated remote attacker (boo#1261024) - Update to release 1.11.3 * conf: add BasicAuthRealm feature * basic auth: fix error status …
first Apr 1, 2026 -
Medium max 4.1SUSE-SU-2026:1177-1 1 CVE
Security update for tar
This update for tar fixes the following issue: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
first Apr 2, 2026 -
Medium max 6.9SUSE-SU-2026:1174-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 2, 2026 -
High max 7.8SUSE-SU-2026:1169-1 18 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update Wireshark to version 4.6.4 (jsc#PED-15400). - CVE-2024-9780: ITS dissector crash (bsc#1231475). - CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476). - CVE-2024-11595: Loop wi…
first Apr 2, 2026 -
Critical max 9.8openSUSE-SU-2026:10482-1 1 CVE
osslsigncode-2.13-1.1 on GA media
These are all security issues fixed in the osslsigncode-2.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2026 -
High max 8.7SUSE-SU-2026:1171-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled value…
first Apr 2, 2026 -
High max 8.8openSUSE-FU-2026:20453-1 4 CVEs
Feature update for himmelblau
This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 (jsc#PED-14511): Security issues: - CVE-2025-54882: world readable cloud TGT token (bsc#1247735). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249013). - CV…
first Apr 1, 2026 -
Medium max 4.0SUSE-SU-2026:1166-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Apr 2, 2026 -
High max 7.5SUSE-SU-2026:1170-1 1 CVE
Security update for perl-Crypt-URandom
This update for perl-Crypt-URandom fixes the following issue: Update to 0.550.0 (0.55): - CVE-2026-2474: heap buffer overflow in the XS function `crypt_urandom_getrandom()` (bsc#1258266). Changelog: - Fix for sysread/read failures. Thanks to Miha Purg for GH#…
first Apr 2, 2026 -
Critical max 9.3SUSE-SU-2026:1165-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (bsc#1258985). - C…
first Apr 1, 2026 -
Medium max 4.8SUSE-SU-2026:1179-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Apr 2, 2026 -
Critical max 9.3SUSE-SU-2026:1164-1 6 CVEs
Security update for freerdp2
This update for freerdp2 fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (bsc#1258985). - …
first Apr 1, 2026 -
Medium max 6.9SUSE-SU-2026:1173-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 2, 2026 -
Critical max 9.8SUSE-SU-2026:20913-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
first Mar 19, 2026 -
Critical max 9.4SUSE-SU-2026:20912-1 1 CVE
Security update for keylime
This update for keylime fixes the following issues: - Update to version 7.14.0+0 (CVE-2026-1709, bsc#1257895): - CVE-2026-1709: Fixed an authentication bypass which may allow unauthorized administrative operations due to missing client-side TLS authentication…
first Mar 19, 2026 -
Low max 2.1SUSE-SU-2026:20911-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).
first Mar 19, 2026 -
High max 7.0SUSE-SU-2026:20905-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Changes in busybox: - CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. (bsc#1258163) - CVE-2026-26158: Fixed arbitrary file modification and privi…
first Mar 18, 2026 -
Medium max 6.5SUSE-SU-2026:20910-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
first Mar 19, 2026