35,648 results · Feed
-
High max 8.4openSUSE-SU-2026:20133-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…
first Jan 29, 2026 -
High max 7.5openSUSE-SU-2026:20132-1 6 CVEs
Security update for elemental-register, elemental-toolkit
This update for elemental-register, elemental-toolkit fixes the following issues: elemental-register was updated to 1.8.1: Changes on top of v1.8.1: * Update headers to 2026 * Update questions to include SL Micro 6.2 Update to v1.8.1: * Install yip config fil…
first Jan 29, 2026 -
Medium max 5.9openSUSE-SU-2026:20130-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming…
first Jan 29, 2026 -
High max 8.9openSUSE-SU-2026:20127-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: Fixed excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867) - CVE-2025-66418: Fixed resource exhaustion via unbounded number of li…
first Jan 29, 2026 -
High max 7.5openSUSE-SU-2026:20126-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.10+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 28, 2026 -
High max 8.6openSUSE-SU-2026:20125-1 1 CVE
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues: - CVE-2026-24486: Fixed non-default configuration options can lead to path traversal (bsc#1257301).
first Jan 28, 2026 -
UnscoredopenSUSE-SU-2026:20124-1 0 CVEs
Security update for ucode-amd
This update for ucode-amd fixes the following issues: Changes in ucode-amd: - Update to version 20251203 (git commit a0f0e52138e5): * linux-firmware: Update amd-ucode copyright information * linux-firmware: Update AMD cpu microcode - Update to version 2025111…
first Jan 28, 2026 -
UnscoredopenSUSE-SU-2026:20123-1 4 CVEs
Security update for xkbcomp
This update for xkbcomp fixes the following issues: - CVE-2018-15863, CVE-2018-15861, CVE-2018-15859, CVE-2018-15853: Fixed multiple memory handling and correctness issues (bsc#1105832)
first Jan 28, 2026 -
Medium max 6.9openSUSE-SU-2026:20122-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737)
first Jan 28, 2026 -
Medium max 6.3openSUSE-SU-2026:20119-1 1 CVE
Security update for python-FontTools
This update for python-FontTools fixes the following issues: - CVE-2025-66034: Fixed arbitrary file write vulnerability that could lead to remote code execution (bsc#1254366).
first Jan 28, 2026 -
High max 7.5openSUSE-SU-2026:20118-1 5 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: Fixed use-after-free/double-free in ImageMagick (bsc#1254435) - CVE-2025-66628: Fixed Integer Overflow leading to out of bounds read in ImageMagick (32-bit only) (bsc#1254820) - CVE-202…
first Jan 28, 2026 -
Medium max 5.3openSUSE-SU-2026:20117-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: Update to version 12.1: - CVE-2025-64718: js-yaml: fixed prototype pollution in merge (bsc#1255425).
first Jan 27, 2026 -
High max 8.2openSUSE-SU-2026:20113-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Version update to 8.4.16: Security fixes: - CVE-2025-14177: getimagesize() function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode (bsc#1255710). - CVE-2025-14…
first Jan 26, 2026 -
Medium max 6.5openSUSE-SU-2026:20110-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 26, 2026 -
Medium max 5.3openSUSE-SU-2026:20105-1 3 CVEs
Security update for sbctl
This update for sbctl fixes the following issues: Changes in sbctl: - Upgrade the embedded golang.org/x/net to 0.46.0 * Fixes: bsc#1251399, CVE-2025-47911: various algorithms with quadratic complexity when parsing HTML documents * Fixes: bsc#1251609, CVE-2025…
first Jan 23, 2026 -
High max 7.5openSUSE-SU-2026:20099-1 4 CVEs
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - fix CVE-2025-68156 bsc#1255345 - fix CVE-2025-68161 bsc#1256411 - Update to version 1.14.0: * core: Fix gosec G115 integer overflow warnings * core: Add regex length limit * plugin/azur…
first Jan 24, 2026 -
High max 7.5openSUSE-SU-2026:20091-1 1 CVE
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.18: - CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records (bsc#1256997) Feature Changes: * Add more information to the rndc recursing output about fetches. * Reduce t…
first Jan 22, 2026 -
High max 7.8openSUSE-SU-2026:20100-1 4 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2025-14422: Fixed PNM File Parsing Integer Overflow (bsc#1255293) - CVE-2025-14423: Fixed LBM File Parsing Stack-based Buffer Overflow (bsc#1255294) - CVE-2025-14424: Fixed XCF File Parsi…
first Jan 21, 2026 -
High max 8.6openSUSE-SU-2026:20095-1 1 CVE
Security update for python-jaraco.context
This update for python-jaraco.context fixes the following issues: - CVE-2026-23949: Fixed malicious tar archives may lead to path traversal (bsc#1256954).
first Jan 23, 2026 -
Medium max 6.5openSUSE-SU-2026:20090-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Security fixes: - CVE-2025-60876: HTTP request header injection in wget (bsc#1253245). - CVE-2025-46394: Fixed tar hidden files via escape sequence (bsc#1241661). Other fixes: - Set CONFIG_FIRST_SYSTEM_ID to…
first Jan 22, 2026 -
High max 7.5openSUSE-SU-2026:20089-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed Denial-of-Service issue that may lead to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets (bsc#1256902)
first Jan 22, 2026 -
High max 8.9openSUSE-SU-2026:20088-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
first Jan 22, 2026 -
Medium max 5.3openSUSE-SU-2026:20087-1 1 CVE
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).
first Jan 22, 2026 -
Medium max 4.5openSUSE-SU-2026:20086-1 1 CVE
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458).
first Jan 22, 2026 -
Critical max 9.1openSUSE-SU-2026:20085-1 6 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.6 (released 2026-01-15) (bsc#1244485) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd/…
first Jan 22, 2026 -
High max 7.5openSUSE-SU-2026:20084-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114). - CVE-2025-6199: uninitialized mem…
first Jan 22, 2026 -
Medium max 6.8openSUSE-SU-2026:20083-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.1openSUSE-SU-2026:20082-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: * Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported (it previously was an experime…
first Jan 22, 2026 -
High max 7.5openSUSE-SU-2026:20081-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: - Update to 3.13.11: - Security - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount…
first Jan 22, 2026 -
High max 8.4openSUSE-SU-2026:20080-1 5 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out of bounds read (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client proc…
first Jan 22, 2026 -
Critical max 9.1openSUSE-SU-2026:20077-1 6 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd…
first Jan 22, 2026 -
Low max 1.9openSUSE-SU-2026:20075-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 22, 2026 -
High max 8.4openSUSE-SU-2026:20072-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376). - CVE-2025-9566: kube play command may overwrite host f…
first Jan 21, 2026 -
High max 7.5openSUSE-SU-2026:20069-1 1 CVE
Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2025-68616: Fixed a server-side request forgery in default fetcher (boo#1256936).
first Jan 20, 2026 -
High max 7.8
Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Jan 20, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Jan 20, 2026 -
Medium max 6.5openSUSE-SU-2026:20076-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735).
first Jan 22, 2026 -
Medium max 6.5openSUSE-SU-2026:20060-1 3 CVEs
Security update for cargo-c
This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discard_all_messages (bsc#1243179) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249012) - CVE-2024-12224: idna: Fi…
first Jan 19, 2026 -
Medium max 6.5openSUSE-SU-2026:20058-1 3 CVEs
Security update for go-sendxmpp
This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.15.1: Added * Add XEP-0359 Origin-ID to messages (requires go-xmpp >= v0.2.18). Changed * HTTP upload: Ignore timeouts on disco IQs as some components do not reply. …
first Jan 17, 2026 -
Medium max 5.1openSUSE-SU-2026:20057-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2851> - Update to Docker 28.5.0-ce. See upstream changelog online at <https:…
first Jan 17, 2026