35,560 results · Feed
-
Medium max 4.0SUSE-SU-2026:4081-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs (bsc#1268965).
first Sep 8, 2026 -
Medium max 6.2SUSE-SU-2026:4080-1 1 CVE
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664).
first Sep 8, 2026 -
Medium max 5.1SUSE-SU-2026:4074-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4073-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725).
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:4072-1 27 CVEs
Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-42215: command injection via Git options bypass (bsc#1264604). - CVE-2026-42284: unsafe option check validates multi_options before shlex.split transforms it (bsc#1264605). - CVE-2026-442…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4071-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 8, 2026 -
Medium max 6.5SUSE-SU-2026:4070-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4069-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4068-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4067-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4066-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4065-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record (bsc#1278084).
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:4064-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4063-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 8.7SUSE-SU-2026:4062-1 2 CVEs
Security update for terraform-provider-null
This update for terraform-provider-null fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278269).…
first Sep 8, 2026 -
Medium max 5.6SUSE-SU-2026:4061-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 8, 2026 -
Medium max 5.6SUSE-SU-2026:4060-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 8, 2026 -
High max 7.7SUSE-SU-2026:4059-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).
first Sep 8, 2026 -
Medium max 4.0SUSE-SU-2026:4056-1 1 CVE
Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
first Sep 7, 2026 -
Medium max 4.8SUSE-SU-2026:4055-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4054-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777)…
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:4053-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 7, 2026 -
UnscoredSUSE-SU-2026:4051-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 7, 2026 -
Medium max 6.2SUSE-SU-2026:4050-1 1 CVE
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664).
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:4049-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4048-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 7, 2026 -
Critical max 9.1SUSE-SU-2026:4047-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-20…
first Sep 7, 2026 -
Medium max 6.5SUSE-SU-2026:4046-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 7, 2026 -
Critical max 9.8SUSE-SU-2026:4045-1 2 CVEs
Security update for amazon-cloudwatch-agent
This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established acc…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4044-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write (bsc#1248078).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4043-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4042-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory alloca…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4041-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4040-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 7, 2026 -
Critical max 9.8SUSE-SU-2026:4039-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4038-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4037-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4036-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory alloca…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4034-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4033-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026