35,560 results · Feed
-
High max 7.5SUSE-SU-2026:4410-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 1, 2026 -
Critical max 9.6openSUSE-SU-2026:21999-1 12 CVEs
Security update for rclone
This update for rclone fixes the following issues: Changes in rclone: - Update to version 1.75.1: (boo#1279548) - Security - archive - Fix zip slip path traversal in untrusted zip files GHSA-66hp-wgxq-6f5q CVE-PENDING (Nick Craig-Wood) - Hide any archive entr…
first Sep 28, 2026 -
High max 8.4openSUSE-SU-2026:22003-1 3 CVEs
Security update for python-pymongo
This update for python-pymongo fixes the following issues: Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds of an allocated buffer (bsc#1282845) - CVE-2026-96748: h…
first Sep 29, 2026 -
Medium max 4.0openSUSE-SU-2026:21997-1 1 CVE
Security update for aria2
This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine() when a line begins with a NUL byte (boo#1276754) - Fix build with Nettle 4.0 [be1caa2d] (bsc#1257934)
first Sep 28, 2026 -
Critical max 9.6openSUSE-SU-2026:21996-1 4 CVEs
Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.54.2 * Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other udp improvement * Add Wireguard Chain Proxy Support * Fix …
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:21988-1 20 CVEs
Security update for radare2
This update for radare2 fixes the following issues: Changes in radare2: - Update to version 6.2.2: * Analysis: new JNI plugin with typed interface tables, arm64 Swift float calling conventions, DWARF prototype linking, jump-table and switch-case fixes * Core:…
first Sep 25, 2026 -
High max 7.8openSUSE-SU-2026:21974-1 1 CVE
Security update for emacs
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390).
first Sep 29, 2026 -
Critical max 9.8openSUSE-SU-2026:21980-1 62 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditi…
first Sep 30, 2026 -
Medium max 5.3openSUSE-SU-2026:21977-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 30, 2026 -
Medium max 6.1openSUSE-SU-2026:21976-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21975-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
first Sep 29, 2026 -
Low max 3.7openSUSE-SU-2026:21973-1 5 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocati…
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21972-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629).
first Sep 29, 2026 -
High max 7.5openSUSE-SU-2026:21970-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).
first Sep 29, 2026 -
High max 7.7openSUSE-SU-2026:21968-1 9 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.…
first Sep 29, 2026 -
Critical max 9.8openSUSE-SU-2026:21960-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).
first Sep 25, 2026 -
High max 8.6openSUSE-RU-2026:22002-1 1 CVE
Recommended update for tesseract-ocr
This update for tesseract-ocr fixes the following issues: Changes in tesseract-ocr: - Update tesseract-CVE-2026-88053.patch to null the adaptive template pointer arrays again and the class pruners as upstream does, fixing an abort at exit on every run and inv…
first Sep 29, 2026 -
High max 7.1openSUSE-SU-2026:21985-1 1 CVE
Security update for valkey
This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 30, 2026 -
Critical max 9.8openSUSE-SU-2026:21984-1 15 CVEs
Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11
This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-202…
first Sep 30, 2026 -
High max 8.4openSUSE-SU-2026:21983-1 18 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…
first Sep 30, 2026 -
High max 8.7openSUSE-SU-2026:21982-1 19 CVEs
Security update for sccache
This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavi…
first Sep 30, 2026 -
High max 7.8SUSE-SU-2026:4409-1 10 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). - CVE-2026-18303: TIF File Parsing Stack-based Buffer Over…
-
Critical max 9.8SUSE-SU-2026:4408-1 19 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1269861). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can…
-
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
-
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
-
High max 8.8openSUSE-SU-2026:11938-1 1 CVE
yast2-auth-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-auth-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
Medium max 6.9openSUSE-SU-2026:11937-1 3 CVEs
squid-7.7-2.1 on GA media
These are all security issues fixed in the squid-7.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.5openSUSE-SU-2026:11936-1 4 CVEs
python313-tokenizers-0.23.2-1.1 on GA media
These are all security issues fixed in the python313-tokenizers-0.23.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 8.4openSUSE-SU-2026:11935-1 3 CVEs
python313-pymongo-4.18.2-1.1 on GA media
These are all security issues fixed in the python313-pymongo-4.18.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.8openSUSE-SU-2026:11932-1 16 CVEs
binutils-2.47-1.1 on GA media
These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026 -
High max 7.5SUSE-SU-2026:4407-1 1 CVE
Security update for jawn
This update for jawn fixes the following issue: - CVE-2026-61814: quadratic rescan complexity in AsyncParser can cause excessive CPU resource exhaustion (bsc#1282548).
first Sep 30, 2026 -
UnscoredSUSE-SU-2026:4406-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 30, 2026 -
UnscoredSUSE-SU-2026:4405-1 0 CVEs
Security update for wicked2nm
This update for wicked2nm fixes the following issue: - serde_with: KeyValueMap serialization panics on empty sequence or map entries (bsc#1271848). Changes for wicked2nm: - Update v1.5.2. - Update v1.5.1: * Update agama to fix default vlan flags (bsc#1271079).
first Sep 30, 2026 -
High max 7.5SUSE-SU-2026:4404-1 4 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At (bsc#1280689). - CVE-202…
first Sep 30, 2026 -
High max 7.5SUSE-SU-2026:4403-1 4 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At (bsc#1280689). - CVE-20…
first Sep 30, 2026 -
Critical max 9.8SUSE-SU-2026:4402-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the full_l…
first Sep 30, 2026 -
High max 8.2SUSE-SU-2026:4401-1 4 CVEs
Security update for python313
This update for python313 fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can c…
first Sep 30, 2026 -
High max 7.0SUSE-SU-2026:4400-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
first Sep 30, 2026 -
UnscoredSUSE-SU-2026:4399-1 0 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: - Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). - Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). - Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). - …
first Sep 30, 2026 -
Medium max 5.5openSUSE-SU-2026:11934-1 1 CVE
libIex-3_4-33-3.4.15-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 30, 2026