35,560 results · Feed
-
High max 8.9SUSE-SU-2026:24125-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24120-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-81870: OpenTelem…
first Oct 8, 2026 -
Medium max 6.5SUSE-SU-2026:24118-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration p…
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:4635-1 8 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
-
High max 8.2SUSE-SU-2026:4633-1 6 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overfl…
-
UnscoredSUSE-SU-2026:24130-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59: * Fixed CVE-2026-46675 (med…
first Oct 10, 2026 -
Critical max 9.1SUSE-SU-2026:24128-1 9 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24126-1 10 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
first Oct 9, 2026 -
Critical max 9.3SUSE-SU-2026:24122-1 2 CVEs
Security update for python-anyio
This update for python-anyio fixes the following issues: - CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr…
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:24121-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). - …
first Oct 8, 2026 -
High max 7.4SUSE-SU-2026:24119-1 7 CVEs
Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: out-o…
first Oct 8, 2026 -
High max 7.8SUSE-SU-2026:24117-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch …
first Oct 8, 2026 -
High max 7.0SUSE-SU-2026:24116-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
High max 8.7openSUSE-SU-2026:12111-1 1 CVE
python313-CairoSVG-2.9.1-1.1 on GA media
These are all security issues fixed in the python313-CairoSVG-2.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
Medium max 6.5openSUSE-SU-2026:12110-1 2 CVEs
libxls-devel-1.6.4-1.1 on GA media
These are all security issues fixed in the libxls-devel-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.2openSUSE-SU-2026:12109-1 1 CVE
guava-33.7.2-1.1 on GA media
These are all security issues fixed in the guava-33.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4632-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620).
first Oct 12, 2026 -
High max 8.6SUSE-SU-2026:4631-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base6…
first Oct 12, 2026 -
Critical max 9.2SUSE-SU-2026:4630-1 8 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zsta…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4629-1 13 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization a…
first Oct 12, 2026 -
High max 8.7SUSE-SU-2026:4628-1 9 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4627-1 129 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929): - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege …
first Oct 12, 2026 -
Medium max 5.3SUSE-SU-2026:4626-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2026-77050: potential denial-of-service in `get_supported_language_variant()` when processing many distinct, very long language codes (bsc#1284481). - CVE-2026-84429: potential denial-of-service …
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4625-1 15 CVEs
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization af…
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4624-1 10 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 12, 2026 -
High max 8.2SUSE-SU-2026:4623-1 34 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
first Oct 12, 2026 -
Critical max 9.2SUSE-SU-2026:4621-1 5 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handlin…
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4620-1 10 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 12, 2026 -
Medium max 4.3openSUSE-SU-2026:12113-1 1 CVE
libsbc1-2.2-2.1 on GA media
These are all security issues fixed in the libsbc1-2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
Critical max 9.8openSUSE-SU-2026:12112-1 16 CVEs
rclone-1.75.2-1.1 on GA media
These are all security issues fixed in the rclone-1.75.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 7.5openSUSE-SU-2026:12108-1 7 CVEs
ffmpeg-7-7.1.5-4.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
High max 8.7openSUSE-SU-2026:12107-1 2 CVEs
amazon-ecs-init-1.108.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.108.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4622-1 8 CVEs
Security update for apache-sshd
This update for apache-sshd fixes the following issues: - CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357). - CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352). - CVE-2026-93995: Remote executi…
first Oct 12, 2026 -
Low max 3.4SUSE-SU-2026:4618-1 1 CVE
Security update for python3-paramiko
This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Oct 12, 2026 -
Medium max 6.5SUSE-SU-2026:4617-1 2 CVEs
Security update for stunnel
This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). - CVE-2026-70368: oversized log messages in logging routines can cause stack out-…
first Oct 12, 2026 -
High max 8.6SUSE-SU-2026:4616-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base6…
first Oct 12, 2026 -
High max 8.2SUSE-SU-2026:4615-1 34 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). - CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCre…
first Oct 12, 2026 -
Medium max 4.8SUSE-SU-2026:4614-1 2 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can all…
first Oct 12, 2026 -
High max 8.8openSUSE-SU-2026:12106-1 1 CVE
libvpx-devel-1.17.0-1.1 on GA media
These are all security issues fixed in the libvpx-devel-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 11, 2026 -
High max 8.5openSUSE-SU-2026:12105-1 12 CVEs
xwayland-24.1.13-2.1 on GA media
These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026