35,648 results · Feed
-
Critical max 10.0openSUSE-SU-2026:20056-1 2 CVEs
Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests (bsc#1254734). - …
first Jan 15, 2026 -
High max 7.8openSUSE-SU-2026:20055-1 5 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: Update to 3.0.6: - Security: - During development, we received reports from the Zero Day Initiative of potential security issues with some of our file import plug-ins. While these issues are ve…
first Jan 16, 2026 -
Critical max 9.8openSUSE-SU-2026:20046-1 10 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.6.0 ESR MFSA 2025-96 (bsc#1254551) * CVE-2025-14321 (bmo#1992760) Use-after-free in the WebRTC: Signaling component * CVE-2025-14322 (bmo#1…
first Jan 16, 2026 -
High max 7.5openSUSE-SU-2026:20044-1 3 CVEs
Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251509). - CVE-2025-58190: golang.org…
first Jan 15, 2026 -
Medium max 6.9openSUSE-SU-2026:20043-1 3 CVEs
Security update for erlang
This update for erlang fixes the following issues: Update the ssh component to the latest in the maint-27 branch. Security issues fixed: - CVE-2025-48040: ssh: overly tolerant handling of data received from unauthenticated users when processing key exchange m…
first Jan 15, 2026 -
Critical max 9.8openSUSE-SU-2026:20041-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 (bsc#1256340) * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due…
first Jan 15, 2026 -
High max 8.6openSUSE-SU-2026:20039-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - Upgrade to release 9.20.15 Security Fixes: * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379) * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380) * CVE-2025-…
first Jan 15, 2026 -
High max 8.8openSUSE-SU-2026:20038-1 2 CVEs
Security update for wget2
This update for wget2 fixes the following issues: Changes in wget2: - Update to release 2.2.1 * Fix file overwrite issue with metalink [CVE-2025-69194 bsc#1255728] * Fix remote buffer overflow in get_local_filename_real() [CVE-2025-69195 bsc#1255729] * Fix a …
first Jan 14, 2026 -
Critical max 9.6openSUSE-SU-2026:20034-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.111 - Security fixes: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: improper neutralization of Escape, Meta, or …
first Jan 14, 2026 -
High max 7.5openSUSE-SU-2026:20032-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
Medium max 6.3openSUSE-SU-2026:20031-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-1…
first Jan 14, 2026 -
High max 8.3openSUSE-SU-2026:20030-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME), unintended retry intervals (bsc#1254511) - CVE-2025-58098: Fixed Server Side Includes adds query string to #exec cmd (bsc#1254512) - CVE-2025-65082: Fixed CGI environme…
first Jan 14, 2026 -
High max 7.8openSUSE-SU-2026:20029-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
Critical max 10.0openSUSE-SU-2026:20027-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2025-59362: SNMP message …
first Jan 14, 2026 -
High max 8.1openSUSE-SU-2026:20026-1 2 CVEs
Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries (bsc#1252399) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#124901…
first Jan 13, 2026 -
High max 7.5openSUSE-SU-2026:20025-1 2 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…
first Jan 13, 2026 -
Medium max 6.3openSUSE-SU-2026:20022-1 2 CVEs
Security update for matio
This update for matio fixes the following issues: - update to version 1.5.29: * Fix printing rank-1-variable in Mat_VarPrint * Fix array index out of bounds in Mat_VarPrint when printing UTF-8 character data (boo#1239678, CVE-2025-2337) * Fix heap-based buffe…
first Jan 11, 2026 -
High max 7.7openSUSE-SU-2026:20018-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …
first Jan 12, 2026 -
High max 7.1openSUSE-SU-2026:20017-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…
first Jan 12, 2026 -
High max 7.5openSUSE-SU-2026:20015-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 12, 2026 -
High max 7.5openSUSE-SU-2026:20016-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)
first Jan 12, 2026 -
Critical max 9.8openSUSE-SU-2026:20014-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.6.0 ESR was released: * Fixed: Various security fixes. MFSA 2025-94 (bsc#1254551): * CVE-2025-14321: Use-after-free in the WebRTC: Signa…
first Jan 12, 2026 -
Medium max 5.3openSUSE-SU-2026:20013-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
first Jan 11, 2026 -
Critical max 10.0openSUSE-SU-2026:20003-1 4 CVEs
Security update of valkey
This update for valkey fixes the following issues: Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution (bsc#1250995) - CVE-2025-46817: Fixed that a Lua script may lead to integer overflow and potentia…
first Jan 7, 2026 -
High max 8.8openSUSE-SU-2026:20002-1 9 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.5.0 ESR MFSA 2025-91 (bsc#1253188): * CVE-2025-13012 Race condition in the Graphics component * CVE-2025-13016 Incorrect boundary conditions …
first Jan 2, 2026 -
High max 8.8openSUSE-SU-2026:20001-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
first Jan 2, 2026 -
High max 7.8openSUSE-SU-2026:20000-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Changes in salt: - Add minimum_auth_version to enforce security (CVE-2025-62349) - Backport security fixes for vendored tornado * BDSA-2024-3438 * BDSA-2024-3439 * BDSA-2024-9026 - Junos module yaml loader fix …
first Dec 23, 2025 -
High max 7.5openSUSE-SU-2026:10323-1 3 CVEs
traefik-3.6.10-1.1 on GA media
These are all security issues fixed in the traefik-3.6.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 6.1openSUSE-SU-2026:10322-1 2 CVEs
python311-lxml_html_clean-0.4.4-1.1 on GA media
These are all security issues fixed in the python311-lxml_html_clean-0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 6.9openSUSE-SU-2026:10321-1 1 CVE
python311-PyPDF2-2.11.1-6.1 on GA media
These are all security issues fixed in the python311-PyPDF2-2.11.1-6.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Critical max 9.8openSUSE-SU-2026:10320-1 1 CVE
perl-Compress-Raw-Zlib-2.222-1.1 on GA media
These are all security issues fixed in the perl-Compress-Raw-Zlib-2.222-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 6.5openSUSE-SU-2026:10319-1 1 CVE
helm3-3.20.0-2.1 on GA media
These are all security issues fixed in the helm3-3.20.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 6.5openSUSE-SU-2026:10318-1 1 CVE
helm-4.1.1-3.1 on GA media
These are all security issues fixed in the helm-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
High max 8.8openSUSE-SU-2026:10317-1 1 CVE
grype-0.109.1-1.1 on GA media
These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 6.3openSUSE-SU-2026:10316-1 1 CVE
ghostty-1.3.0-1.1 on GA media
These are all security issues fixed in the ghostty-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
Medium max 5.3openSUSE-SU-2026:10315-1 1 CVE
GraphicsMagick-1.3.46-2.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2026 -
High max 7.5openSUSE-SU-2026:10294-1 1 CVE
telemetrygen-0.147.0-1.1 on GA media
These are all security issues fixed in the telemetrygen-0.147.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 5, 2026 -
High max 7.5openSUSE-SU-2026:10293-1 1 CVE
python311-joserfc-1.6.3-1.1 on GA media
These are all security issues fixed in the python311-joserfc-1.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 5, 2026 -
Low max 3.3openSUSE-SU-2026:10290-1 1 CVE
heroic-games-launcher-2.20.1-2.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 5, 2026 -
Medium max 5.3openSUSE-SU-2026:10289-1 1 CVE
freetype2-devel-2.14.2-1.1 on GA media
These are all security issues fixed in the freetype2-devel-2.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 5, 2026