35,648 results · Feed
-
High max 7.5openSUSE-SU-2026:20351-1 1 CVE
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253611).
first Mar 12, 2026 -
High max 7.6openSUSE-SU-2026:20350-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). - …
first Mar 12, 2026 -
High max 7.5openSUSE-SU-2026:20342-1 5 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Changes in go1.26: go1.26.1 (released 2026-03-05) includes security fixes to the crypto/x509, html/template, net/url, and os packages, as well as bug fixes to the go command, the go fix command, the compiler,…
first Mar 11, 2026 -
High max 7.5openSUSE-SU-2026:20341-1 1 CVE
Security update for kea
This update for kea fixes the following issues: Update to release 3.0.1: - CVE-2025-40779: Fixed crash upon interaction between specific client options and subnet selection (bsc#1248801).
first Mar 11, 2026 -
Critical max 9.8openSUSE-SU-2026:20340-1 2 CVEs
Security update for cJSON
This update for cJSON fixes the following issues: - Update to version 1.7.19 * Check for NULL in cJSON_DetachItemViaPointer. * Check overlap before calling strcpy in cJSON_SetValuestring. * Fix Max recursion depth for cJSON_Duplicate to prevent stack exhausti…
first Mar 11, 2026 -
Critical max 9.8openSUSE-SU-2026:20339-1 44 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: Update to version 3.22.0 (jsc#PED-15526): + Major bugfix release: * Complete overhaul of SDL client * Introduction of new WINPR_ATTR_NODISCARD macro wrapping compiler or C language version specific [[nodisca…
first Mar 10, 2026 -
High max 8.6openSUSE-SU-2026:20337-1 38 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: I…
first Mar 9, 2026 -
Medium max 5.3openSUSE-SU-2026:20327-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - Update to version 3.19.1: * CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents (bsc#1251442) * CVE-2025-58190: golang.org/x/net/html: Fixed x…
first Mar 5, 2026 -
Medium max 6.8openSUSE-SU-2026:20326-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
first Mar 5, 2026 -
High max 7.2
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Changes to roundcubemail: Update to 1.6.13: This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: + Fix CSS injectio…
first Mar 5, 2026 -
High max 7.5openSUSE-SU-2026:20322-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-27932: unbounded PBKDF2 iteration count can lead to a denial of service (bsc#1259154)
first Mar 5, 2026 -
Medium max 5.3openSUSE-SU-2026:20318-1 2 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.12.0: * New Features - Add tea actions commands for managing workflow runs and workflows in #880, #796 - Add tea api subcommand for arbitrary API calls not covered by ex…
first Mar 3, 2026 -
Critical max 9.1openSUSE-SU-2026:20308-1 19 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: - Update to version 1.24.13 (jsc#SLE-18320) - CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information. (bsc#1251255) - CVE-2025-61725: net/mail: excessive CPU consu…
first Mar 3, 2026 -
Medium max 6.9openSUSE-SU-2026:20306-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
High max 8.4openSUSE-SU-2026:20305-1 8 CVEs
Security update for podman
This update for podman fixes the following issues: Changes in podman: - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988) - CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds r…
first Mar 3, 2026 -
Critical max 9.1openSUSE-SU-2026:20301-1 18 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: - Update to version 1.25.7 (jsc#SLE-18320) - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821) - CVE-2025-68119: cmd/go: unexpected code e…
first Mar 3, 2026 -
High max 8.2openSUSE-SU-2026:20298-1 1 CVE
Security update for assertj-core
This update for assertj-core fixes the following issues: Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion (bsc#1257293).
first Mar 2, 2026 -
Critical max 9.8openSUSE-SU-2026:20287-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Medium max 5.5openSUSE-SU-2026:20297-1 1 CVE
Security update for rhino
This update for rhino fixes the following issues: Update to 1.7.15.1: - CVE-2025-66453: Fixed a problem with formatting of floating-point numbers to strings that may result in DoS (bsc#1254481).
first Mar 2, 2026 -
High max 7.5openSUSE-SU-2026:20295-1 2 CVEs
Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-53629: header can allocate memory arbitrarily in the server, potentially leading to its exhaustion (bsc#1246471). - CVE-2025-53628: HTTP header smuggling due to insecure trailers merge (bsc#12…
first Mar 2, 2026 -
High max 7.5openSUSE-SU-2026:20292-1 1 CVE
Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)
first Mar 1, 2026 -
High max 7.5openSUSE-SU-2026:20291-1 1 CVE
Security update for fluidsynth
This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file (bsc#1256435).
first Feb 27, 2026 -
Medium max 4.8openSUSE-SU-2026:20290-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
High max 8.6openSUSE-SU-2026:20283-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598).
first Feb 27, 2026 -
Low max 2.8openSUSE-SU-2026:20275-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-2239: Fixed a heap buffer overflow in psd-util.c (bsc#1257959).
first Feb 25, 2026 -
Medium max 5.5openSUSE-SU-2026:20273-1 2 CVEs
Security update for 7zip
This update for 7zip fixes the following issues: - Update to 25.01 (boo#1249130) * The code for handling symbolic links has been changed to provide greater security when extracting files from archives * Command line switch -snld20 can be used to bypass defaul…
first Feb 26, 2026 -
High max 8.9openSUSE-SU-2026:20271-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…
first Feb 26, 2026 -
Low max 3.3openSUSE-SU-2026:20270-1 1 CVE
Security update for autogen
This update for autogen fixes the following issues: - CVE-2025-8746: Fixed improper input validation and memory bounds checking when processing certain malformed configuration files (bsc#1247921)
first Feb 26, 2026 -
High max 8.8openSUSE-SU-2026:20266-1 6 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
High max 8.8openSUSE-SU-2026:20265-1 6 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
Critical max 9.2openSUSE-SU-2026:20261-1 1 CVE
Security update for openQA, os-autoinst, openQA-devel-container
This update for openQA, os-autoinst, openQA-devel-container fixes the following issues: Changes in openQA: - Update to version 5.1771422749.560a3b26: * fix(mcp): set navbar check expression to read-only * feat: support inverted result filters in /tests/overvi…
first Feb 23, 2026 -
UnscoredopenSUSE-SU-2026:20262-1 0 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - Enable SELinux in default daemon.json config (--selinux-enabled). This has no practical impact on non-SELinux systems (bsc#1252290). - Remove git-core recommends on SLE. Most SLE systems have install…
first Feb 20, 2026 -
High max 7.2openSUSE-SU-2026:20260-1 2 CVEs
Security update for mosquitto
This update for mosquitto fixes the following issues: Changes in mosquitto: - update to 2.0.23 (boo#1258671) * Fix handling of disconnected sessions for `per_listener_settings true` * Check return values of openssl *_get_ex_data() and *_set_ex_data() to preve…
first Feb 23, 2026 -
Medium max 5.7openSUSE-SU-2026:20257-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2025-68158: Fixed 1-click account takeover in applications that use the Authlib library (bsc#1256414)
first Feb 19, 2026 -
Medium max 6.0openSUSE-SU-2026:20254-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
High max 8.8openSUSE-SU-2026:20253-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: * Fixed: Security fix. MFSA 2026-10 (bsc#1258231): * CVE-2026-2447: Heap buffer overflow in libvpx.
first Feb 19, 2026 -
Medium max 6.9openSUSE-SU-2026:20251-1 2 CVEs
Security update for cockpit-repos
This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325). - CVE-2025-64718: js-y…
first Feb 18, 2026 -
Medium max 5.3openSUSE-SU-2026:20249-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).
first Feb 18, 2026 -
Medium max 6.8openSUSE-SU-2026:20245-1 1 CVE
Security update for wicked2nm
This update for wicked2nm fixes the following issues: - Update to version 1.4.1 - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908).
first Feb 17, 2026 -
Medium max 6.9openSUSE-SU-2026:20244-1 1 CVE
Security update for cockpit-machines, cockpit
This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324) Changes in cockpit-machines: - Update to 346 * 346 - Performance improvements - Translation updat…
first Feb 17, 2026