35,648 results · Feed
-
Critical max 9.8openSUSE-SU-2026:20239-1 3 CVEs
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2026-25547: Fixed an unbounded brace range expansion leading to excessive CPU and memory consumption. (bsc#1257841) - CVE-2026-1615: Fixed arbitrary code injection due to un…
first Feb 17, 2026 -
High max 7.5openSUSE-SU-2026:20236-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks (bsc#1256569). - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from …
first Feb 15, 2026 -
High max 8.8openSUSE-SU-2026:20235-1 4 CVEs
Security update for fontforge
This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013). - CVE-2025-15269: remote code execution via use-…
first Feb 14, 2026 -
Medium max 6.8openSUSE-SU-2026:20233-1 2 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues: Upgrade openCryptoki to 3.26 (jsc#PED-14609) Security fixes: - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673). - CVE-2026-238…
first Feb 13, 2026 -
UnscoredopenSUSE-SU-2026:20227-1 1 CVE
Security update for patch
This update for patch fixes the following issues: - CVE-2021-45261: invalid pointer via another_hunk function can cause a denial-of-service (bsc#1194037).
first Feb 13, 2026 -
Critical max 9.1openSUSE-SU-2026:20220-1 3 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clo…
first Feb 13, 2026 -
Critical max 9.8openSUSE-SU-2026:20219-1 2 CVEs
Security update for htmldoc
This update for htmldoc fixes the following issues: Changes in htmldoc: - CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380). - version update to 1.9.23: * Fixed a regression in list handling that caused a cr…
first Feb 13, 2026 -
Critical max 9.1openSUSE-SU-2026:20214-1 2 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clon…
first Feb 13, 2026 -
Medium max 5.3openSUSE-SU-2026:20206-1 2 CVEs
Security update for kepler
This update for kepler fixes the following issues: Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251427). - CVE-2025-58190: golang.org…
first Feb 13, 2026 -
UnscoredopenSUSE-SU-2026:20205-1 0 CVEs
Security update for rust1.93
This update for rust1.93 fixes the following issues: Rust is shipped in 1.93.0 version. Please see https://github.com/rust-lang/rust/releases/tag/1.93.0 for changes.
first Feb 12, 2026 -
High max 7.5openSUSE-SU-2026:20204-1 8 CVEs
Security update for python-aiohttp, python-Brotli
This update for python-aiohttp, python-Brotli fixes the following issues: Changes in python-aiohttp: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path componen…
first Feb 12, 2026 -
Medium max 4.3openSUSE-SU-2026:20203-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Feb 11, 2026 -
Low max 2.0openSUSE-SU-2026:20202-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599).
first Feb 11, 2026 -
Low max 3.3openSUSE-SU-2026:20199-1 1 CVE
Security update for micropython
This update for micropython fixes the following issues: Changes in micropython: - CVE-2026-1998: Fixed segmentation fault in `mp_map_lookup` via `mp_import_all` (bsc#1257803). - Version 1.26.1 * esp32: update esp_tinyusb component to v1.7.6 * tools: add an en…
first Feb 11, 2026 -
High max 7.3openSUSE-SU-2026:20198-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958). - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959). - CVE-2025-62231: Fixe…
first Feb 11, 2026 -
High max 8.1openSUSE-SU-2026:20193-1 3 CVEs
Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc
This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Chang…
first Feb 10, 2026 -
High max 7.5openSUSE-SU-2026:20192-1 2 CVEs
Security update for tailscale
This update for tailscale fixes the following issues: Changes in tailscale: - Update to version 1.94.0: * IS SET and NOT SET have been added as device posture operators * India DERP Region City Name updated * Custom DERP servers support GCP Certificate Manage…
first Feb 10, 2026 -
Medium max 6.9openSUSE-SU-2026:20185-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325).
first Feb 6, 2026 -
High max 8.6openSUSE-SU-2026:20186-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP r…
first Feb 6, 2026 -
High max 7.5openSUSE-SU-2026:20184-1 6 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-1312: Fixed potential SQL injection via QuerySet.order_by and FilteredRelation (bsc#1257408). - CVE-2026-1287: Fixed potential SQL injection in column aliases via c…
first Feb 7, 2026 -
Low max 3.7openSUSE-SU-2026:20178-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).
first Feb 5, 2026 -
High max 8.6openSUSE-SU-2026:20177-1 2 CVEs
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257329)…
first Feb 5, 2026 -
High max 8.0openSUSE-SU-2026:20172-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783). - CVE-2025-58436: slow client communication leads to a possible…
first Feb 4, 2026 -
Critical max 9.1openSUSE-SU-2026:20167-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: Changes in xrdp: - CVE-2025-68670: Fixed a potential overflow (bsc#1257362).
first Feb 3, 2026 -
High max 8.8openSUSE-SU-2026:20152-1 12 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).…
first Feb 2, 2026 -
High max 7.8openSUSE-SU-2026:20151-1 8 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.4.13: - CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933). - CVE-2025-13499: Kafka dissector crash (bsc#1254108). - CVE-2025-13945: HTTP3 dissector crash (bsc#1254471). - CV…
first Feb 2, 2026 -
Medium max 5.4openSUSE-SU-2026:20150-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Medium max 6.5openSUSE-SU-2026:20148-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
High max 7.1openSUSE-SU-2026:20147-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 2, 2026 -
Critical max 9.8openSUSE-SU-2026:20145-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026 -
Medium max 6.3openSUSE-SU-2026:20144-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 30, 2026 -
High max 7.5openSUSE-SU-2026:20143-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.2+10 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 30, 2026 -
High max 8.6openSUSE-SU-2026:20142-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library (bsc#1250562). - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code …
first Jan 30, 2026 -
High max 8.5openSUSE-SU-2026:20141-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502).
first Jan 30, 2026 -
High max 8.4openSUSE-SU-2026:20140-1 4 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion (bsc#1255333): - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/op…
first Jan 30, 2026 -
Medium max 5.7openSUSE-SU-2026:20139-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).
first Jan 30, 2026 -
Medium max 5.3openSUSE-SU-2026:20138-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range check…
first Jan 30, 2026 -
Medium max 4.6openSUSE-SU-2026:20137-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
first Jan 29, 2026 -
High max 8.4openSUSE-SU-2026:20136-1 2 CVEs
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to …
first Jan 29, 2026 -
High max 7.5openSUSE-SU-2026:20134-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Jan 29, 2026