35,560 results · Feed
-
High max 8.1openSUSE-SU-2026:12231-1 4 CVEs
bind-9.20.30-1.1 on GA media
These are all security issues fixed in the bind-9.20.30-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4897-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4895-1 5 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads (bsc#1277618). - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and…
first Oct 23, 2026 -
High max 7.8SUSE-SU-2026:4893-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). - CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#12849…
first Oct 23, 2026 -
High max 7.5SUSE-SU-2026:4891-1 2 CVEs
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272130). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated…
first Oct 23, 2026 -
High max 7.1SUSE-SU-2026:4890-1 1 CVE
Security update for cpupower
This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: - Release to latest kernel-source including: * intel-speed-select: Harden daemon pidfile …
first Oct 23, 2026 -
Medium max 6.1openSUSE-SU-2026:22165-1 4 CVEs
Security update for libmodplug
This update for libmodplug fixes the following issues: Changes in libmodplug: - CVE-2026-108577: This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumptio…
first Oct 23, 2026 -
High max 7.0openSUSE-SU-2026:22163-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issue: - CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338).
first Oct 23, 2026 -
UnscoredopenSUSE-SU-2026:22162-1 0 CVEs
Security update for haproxy
This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: - Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: t…
first Oct 23, 2026 -
Critical max 9.8SUSE-SU-2026:4889-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-6…
-
Critical max 10.0SUSE-SU-2026:4888-1 3 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: targ…
-
Medium max 6.8SUSE-SU-2026:4847-1 1 CVE
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1
-
Medium max 6.8SUSE-SU-2026:4820-1 1 CVE
Security update for openssl-certs
This update for openssl-certs fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1
-
Medium max 5.3openSUSE-SU-2026:22149-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Oct 21, 2026 -
Medium max 4.6openSUSE-SU-2026:22147-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698).
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:22146-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: -…
first Oct 21, 2026 -
High max 8.7openSUSE-SU-2026:22145-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protoco…
first Oct 20, 2026 -
High max 8.2openSUSE-SU-2026:22143-1 1 CVE
Security update for guava
This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes f…
first Oct 20, 2026 -
Critical max 9.2openSUSE-SU-2026:12230-1 14 CVEs
python313-Pillow-13.0.0-1.1 on GA media
These are all security issues fixed in the python313-Pillow-13.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
High max 7.5openSUSE-SU-2026:12229-1 4 CVEs
libntpc1-1.2.6-1.1 on GA media
These are all security issues fixed in the libntpc1-1.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Critical max 9.2
matomo-5.14.2-1.1 on GA media
These are all security issues fixed in the matomo-5.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
High max 8.8openSUSE-SU-2026:12227-1 1 CVE
kubevirt1.8-container-disk-1.8.4-6.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-6.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Medium max 6.8openSUSE-SU-2026:12226-1 1 CVE
gotosocial-0.22.3-1.1 on GA media
These are all security issues fixed in the gotosocial-0.22.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
UnscoredopenSUSE-SU-2026:12225-1 0 CVEs
fuse-overlayfs-1.18-1.1 on GA media
These are all security issues fixed in the fuse-overlayfs-1.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Critical max 9.6openSUSE-SU-2026:12224-1 66 CVEs
MozillaThunderbird-153.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.4.27: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Medium max 4.6SUSE-SU-2026:24268-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698).
first Oct 21, 2026 -
Medium max 5.3SUSE-SU-2026:24267-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Oct 21, 2026 -
High max 7.5SUSE-SU-2026:24266-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: -…
first Oct 21, 2026 -
High max 8.7SUSE-SU-2026:24265-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protoco…
first Oct 20, 2026 -
High max 8.2SUSE-SU-2026:24263-1 1 CVE
Security update for guava
This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes f…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:24261-1 1 CVE
Security update for aliyun-cli
This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli…
first Oct 19, 2026 -
Critical max 9.6SUSE-SU-2026:24260-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
first Oct 19, 2026 -
Medium max 5.9SUSE-SU-2026:24258-1 2 CVEs
Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399).…
first Oct 16, 2026 -
High max 7.8SUSE-SU-2026:24256-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
Medium max 6.2SUSE-SU-2026:24255-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
UnscoredSUSE-SU-2026:4821-1 0 CVEs
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state (bsc#1286261) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1 Updated to 2.90 state (bsc#1279961) Removed: - AffirmTrust Commercial - …
-
Critical max 9.2
Security update for php74
This update for php74 fixes the following issues: Fixed two security issues: - CVE-2026-109618: memory corruption leading to RCE - CVE-2026-109619: memory corruption leading to RCE
first Oct 22, 2026 -
Critical max 9.8SUSE-SU-2026:4867-1 16 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client c…
first Oct 22, 2026 -
Medium max 6.8SUSE-SU-2026:4863-1 1 CVE
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
first Oct 22, 2026