35,560 results · Feed
-
High max 7.8openSUSE-SU-2026:21864-1 2 CVEs
Security update for mbedtls-2
This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - CVE-2025-52496: race condition in AESNI support detection, AES key disclosure / GCM forgery in multithreaded programs (boo#1245810) - CVE-2025-59438: padding oracle through timing o…
first Sep 16, 2026 -
High max 7.5openSUSE-SU-2026:11794-1 8 CVEs
ffmpeg-8-8.1.2-5.1 on GA media
These are all security issues fixed in the ffmpeg-8-8.1.2-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
High max 7.5openSUSE-SU-2026:21870-1 1 CVE
Security update for openai-codex
This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: * Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume * Answer questions inline while Codex keeps w…
first Sep 16, 2026 -
High max 7.0openSUSE-SU-2026:21869-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378) - CVE-2026-78475: unbounded variable-length stack allocations in t…
first Sep 16, 2026 -
High max 7.8openSUSE-SU-2026:21867-1 1 CVE
Security update for mkvtoolnix
This update for mkvtoolnix fixes the following issues: Changes in mkvtoolnix: - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic (boo#1280126).
first Sep 16, 2026 -
High max 7.8openSUSE-SU-2026:21866-1 1 CVE
Security update for chirp
This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: * ftm300d: Experimental Yaesu FTM-300DR driver * Update Ukrainian localization * ar8200: Fix importing memories with AM mode * Unify Baofeng setting descriptions…
first Sep 16, 2026 -
Low max 3.7openSUSE-SU-2026:21865-1 1 CVE
Security update for mbedtls
This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to version 3.6.7: * CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised group (boo#1280186) * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected grou…
first Sep 16, 2026 -
Medium max 6.5openSUSE-SU-2026:21863-1 2 CVEs
Security update for live555
This update for live555 fixes the following issues: Changes in live555: - Update to version 2026.08.25: * Fixed a bug in "VorbisAudioRTPSource" that could have caused a malicious SDP description to crash a RTP client. - update to 2026.08.14: * Fixed a bug tha…
first Sep 16, 2026 -
High max 7.5openSUSE-SU-2026:21861-1 3 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH channel messages (CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, bsc…
first Sep 15, 2026 -
High max 7.0openSUSE-SU-2026:21856-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] - split all plugins into…
first Sep 16, 2026 -
Critical max 10.0openSUSE-SU-2026:21853-1 24 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001): * CVE-2026-75874 (bmo#2039972) Sandbox escape in the Remote Settings Client component * CVE-2026-84118 (bmo#2057457) Use-after-…
first Sep 15, 2026 -
Medium max 6.5openSUSE-SU-2026:21851-1 3 CVEs
Security update for kronosnet
This update for kronosnet fixes the following issues: - CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments can lead to potential exposure of encryption keys (bsc#1271923). - CVE-2026-15812: im…
first Sep 15, 2026 -
Medium max 6.5openSUSE-SU-2026:11800-1 1 CVE
python313-litellm-1.101.0-1.1 on GA media
These are all security issues fixed in the python313-litellm-1.101.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Medium max 4.0openSUSE-SU-2026:11799-1 1 CVE
python313-aiosmtplib-5.1.3-1.1 on GA media
These are all security issues fixed in the python313-aiosmtplib-5.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Medium max 5.3openSUSE-SU-2026:11798-1 1 CVE
go-passbolt-cli-0.5.2-1.1 on GA media
These are all security issues fixed in the go-passbolt-cli-0.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Critical max 9.8openSUSE-SU-2026:11797-1 6 CVEs
freeipmi-1.6.19-1.1 on GA media
These are all security issues fixed in the freeipmi-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Critical max 9.6openSUSE-SU-2026:11796-1 63 CVEs
firefox-esr-153.3.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Medium max 5.4openSUSE-SU-2026:11795-1 1 CVE
ffmpeg-9-libavcodec-devel-9.0.1-6.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-6.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
High max 7.4openSUSE-SU-2026:11793-1 1 CVE
ant-1.10.18-2.1 on GA media
These are all security issues fixed in the ant-1.10.18-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Low max 3.3openSUSE-SU-2026:11792-1 1 CVE
7zip-26.03-1.1 on GA media
These are all security issues fixed in the 7zip-26.03-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
High max 8.7SUSE-SU-2026:4242-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issue: - CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613).
-
High max 8.2SUSE-SU-2026:4241-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
-
High max 8.8SUSE-SU-2026:4240-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
-
High max 8.7SUSE-SU-2026:4239-1 6 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
-
High max 8.8SUSE-SU-2026:4238-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
-
Critical max 9.1SUSE-SU-2026:4237-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
-
Critical max 9.8SUSE-SU-2026:4231-1 5 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
-
High max 7.5SUSE-SU-2026:2834-2 8 CVEs
Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…
first Sep 13, 2026 -
Low max 3.8SUSE-SU-2026:23543-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
High max 8.7SUSE-SU-2026:4217-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). - CVE-202…
first Sep 16, 2026 -
Medium max 4.3SUSE-SU-2026:4216-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 16, 2026 -
High max 8.7SUSE-SU-2026:4213-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). - CVE-202…
-
Critical max 10.0SUSE-SU-2026:4212-1 21 CVEs
Security update for distribution
This update for distribution fixes the following issues: Security issues fixed: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260283). - CVE-2026-33540: information disclosur…
-
Critical max 9.6SUSE-SU-2026:4210-1 7 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs (bsc#1265542). - CVE-2026-33814: golang.org/x/net/http2: infinite…
-
High max 7.8SUSE-SU-2026:4207-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
-
Medium max 4.0SUSE-SU-2026:4205-1 1 CVE
Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
-
Medium max 6.6SUSE-SU-2026:4204-1 6 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726). - CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723). - C…
-
Critical max 9.8SUSE-SU-2026:4203-1 11 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE…
-
High max 8.2SUSE-SU-2026:4201-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
-
High max 7.8SUSE-SU-2026:4211-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).