35,560 results · Feed
-
High max 7.5openSUSE-SU-2026:12196-1 1 CVE
helm3-3.22.1-1.1 on GA media
These are all security issues fixed in the helm3-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12195-1 1 CVE
hauler-2.1.2-1.1 on GA media
These are all security issues fixed in the hauler-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 5.5openSUSE-SU-2026:12194-1 1 CVE
eog-50.4-1.1 on GA media
These are all security issues fixed in the eog-50.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12193-1 1 CVE
distribution-registry-3.1.2-2.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 5.7openSUSE-SU-2026:12192-1 6 CVEs
cups-2.4.20-1.1 on GA media
These are all security issues fixed in the cups-2.4.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12191-1 2 CVEs
apache-arrow-26.0.0-1.1 on GA media
These are all security issues fixed in the apache-arrow-26.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Critical max 9.8openSUSE-SU-2026:12190-1 77 CVEs
MozillaFirefox-158.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-158.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.2openSUSE-SU-2026:12189-1 7 CVEs
GraphicsMagick-1.3.49-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.49-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 8.6SUSE-SU-2026:24251-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make…
first Oct 9, 2026 -
Critical max 9.5SUSE-SU-2026:24250-1 7 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). - CVE-2026-66066: unsafe image processing operations on untrusted uploads can …
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24247-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-81870: OpenTelem…
first Oct 8, 2026 -
Medium max 6.8SUSE-SU-2026:24246-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
High max 8.2SUSE-SU-2026:24245-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
High max 7.5SUSE-SU-2026:24244-1 1 CVE
Security update for perl-XS-Parse-Keyword
This update for perl-XS-Parse-Keyword fixes the following issue: - CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247).
first Oct 14, 2026 -
High max 7.7SUSE-SU-2026:24243-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 14, 2026 -
Critical max 9.8SUSE-SU-2026:24235-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Low max 2.5SUSE-SU-2026:24242-1 1 CVE
Security update for mutt
This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).
first Oct 14, 2026 -
Critical max 9.8SUSE-SU-2026:24239-1 13 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization a…
first Oct 13, 2026 -
Critical max 9.8SUSE-SU-2026:24237-1 15 CVEs
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization af…
first Oct 13, 2026 -
Medium max 5.5SUSE-SU-2026:24236-1 2 CVEs
Security update for agama
This update for agama fixes the following issues: Changes in agama: - Added support for the "inst.listen_on" boot parameter - The "inst.remote=0" option disables remote access (needed for CC compliant installation jsc#PED-16702) - It is possible to specify IP…
first Oct 9, 2026 -
Critical max 9.2SUSE-SU-2026:24234-1 5 CVEs
Security update for iperf
This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). - CVE-2026-71218: unbounded peer-controlled allocation…
first Oct 12, 2026 -
High max 7.5SUSE-SU-2026:24233-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: Security issues fixed: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables i…
first Oct 12, 2026 -
Medium max 6.5SUSE-SU-2026:24232-1 2 CVEs
Security update for stunnel
This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). - CVE-2026-70368: oversized log messages in logging routines can cause stack out-…
first Oct 12, 2026 -
High max 8.5SUSE-SU-2026:24230-1 12 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-…
first Oct 12, 2026 -
High max 7.0SUSE-SU-2026:24227-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24226-1 9 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 9, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…
first Oct 9, 2026 -
Critical max 9.2SUSE-SU-2026:24224-1 5 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handlin…
first Oct 9, 2026 -
Medium max 6.8SUSE-SU-2026:24223-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * …
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24219-1 10 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
first Oct 9, 2026 -
Medium max 5.9SUSE-SU-2026:24218-1 1 CVE
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: - CVE-2026-92091: `JWK.import_key()` validates the `key_ops` JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive r…
first Oct 9, 2026 -
High max 8.9SUSE-SU-2026:24217-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 9, 2026 -
Medium max 6.3SUSE-SU-2026:24216-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24215-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 9, 2026 -
High max 8.7SUSE-SU-2026:24213-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass a…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24207-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). - …
first Oct 8, 2026 -
Medium max 5.5SUSE-SU-2026:24204-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 8, 2026 -
High max 7.8SUSE-SU-2026:24202-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch …
first Oct 8, 2026 -
UnscoredSUSE-SU-2026:24200-1 0 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: - Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). - Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). - Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). - …
first Oct 8, 2026 -
Critical max 9.8SUSE-SU-2026:24214-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). Changes for ghostscript: - Version upgrade…
first Oct 9, 2026