35,560 results · Feed
-
High max 8.8SUSE-SU-2026:4868-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: - CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). - CVE-2026-65335: webkitgtk: Processing maliciously cr…
first Oct 22, 2026 -
Critical max 9.8SUSE-SU-2026:4866-1 16 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client c…
first Oct 22, 2026 -
Critical max 9.1SUSE-SU-2026:4864-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.10 (bsc#1255111): - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial wi…
first Oct 22, 2026 -
UnscoredSUSE-SU-2026:4861-1 0 CVEs
Security update for distribution
This update for distribution rebuilds it against the current go security release.
first Oct 22, 2026 -
Low max 2.5SUSE-SU-2026:4857-1 1 CVE
Security update for mutt
This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).
-
Critical max 9.8SUSE-SU-2026:4856-1 4 CVEs
Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
-
UnscoredSUSE-SU-2026:4854-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
-
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially expl…
-
Critical max 9.2
Security update for php7
This update for php7 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
-
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
-
High max 7.5openSUSE-SU-2026:22142-1 1 CVE
Security update for yt-dlp
This update for yt-dlp fixes the following issues: Changes in yt-dlp: Update to version 2026.08.19: * utils: float_or_none: Catch OverflowError * americastestkitchen: Fix season/series extraction * apple: Rework extractors * ard: Remove dead extractor * bandc…
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:22140-1 1 CVE
Security update for aliyun-cli
This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli…
first Oct 19, 2026 -
Critical max 9.6openSUSE-SU-2026:22139-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
first Oct 19, 2026 -
Medium max 6.5openSUSE-SU-2026:12223-1 2 CVEs
stgit-2.7.0-1.1 on GA media
These are all security issues fixed in the stgit-2.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:12222-1 2 CVEs
libspice-server-devel-0.16.0-3.1 on GA media
These are all security issues fixed in the libspice-server-devel-0.16.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.1openSUSE-SU-2026:12221-1 1 CVE
roundcubemail-1.6.20-1.1 on GA media
These are all security issues fixed in the roundcubemail-1.6.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.8openSUSE-SU-2026:12220-1 1 CVE
regclient-0.11.7-1.1 on GA media
These are all security issues fixed in the regclient-0.11.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.2
php8-8.5.12-1.1 on GA media
These are all security issues fixed in the php8-8.5.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:12208-1 2 CVEs
amazon-cloudwatch-agent-1.300073.0-3.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.8openSUSE-SU-2026:12218-1 8 CVEs
perl-Text-CSV_XS-1.650.0-1.1 on GA media
These are all security issues fixed in the perl-Text-CSV_XS-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.1openSUSE-SU-2026:12217-1 15 CVEs
perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media
These are all security issues fixed in the perl-Cpanel-JSON-XS-4.800.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 8.2openSUSE-SU-2026:12216-1 3 CVEs
owntone-29.3-1.1 on GA media
These are all security issues fixed in the owntone-29.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.1openSUSE-SU-2026:12215-1 4 CVEs
libmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 on GA media
These are all security issues fixed in the libmodplug-devel-0.8.9.0+git20170610.f6dd59a-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.1openSUSE-SU-2026:12214-1 3 CVEs
kyverno-1.19.2-1.1 on GA media
These are all security issues fixed in the kyverno-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Low max 2.9openSUSE-SU-2026:12213-1 1 CVE
ibus-typing-booster-2.31.2-1.1 on GA media
These are all security issues fixed in the ibus-typing-booster-2.31.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.1openSUSE-SU-2026:12212-1 3 CVEs
go1.26-1.26.10-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 5.4openSUSE-SU-2026:12211-1 1 CVE
firefox-esr-153.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 5.3openSUSE-SU-2026:12210-1 1 CVE
cramfs-tools-2.2-1.1 on GA media
These are all security issues fixed in the cramfs-tools-2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
High max 7.5openSUSE-SU-2026:12209-1 1 CVE
coredns-1.15.0-1.1 on GA media
These are all security issues fixed in the coredns-1.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Medium max 6.3SUSE-SU-2026:4832-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 21, 2026 -
Medium max 6.1SUSE-SU-2026:4845-1 1 CVE
Security update for tiff
This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough (bsc#1280164).
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.3.36: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
UnscoredSUSE-SU-2026:4837-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Oct 21, 2026 -
High max 7.5SUSE-SU-2026:4836-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
first Oct 21, 2026 -
High max 8.5SUSE-SU-2026:4835-1 12 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-…
first Oct 21, 2026 -
Critical max 9.6SUSE-SU-2026:4834-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
first Oct 21, 2026 -
Medium max 6.8SUSE-SU-2026:4810-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
-
Critical max 9.2SUSE-SU-2026:4809-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme …
-
Medium max 6.1SUSE-SU-2026:4807-1 1 CVE
Security update for python-oauthlib
This update for python-oauthlib fixes the following issue: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526).