35,560 results · Feed
-
High max 7.1SUSE-SU-2026:3990-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 7, 2026 -
Medium max 5.1SUSE-SU-2026:3978-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 4, 2026 -
UnscoredSUSE-SU-2026:3974-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Sep 4, 2026 -
Medium max 4.2SUSE-SU-2026:3973-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). Changes for libsoup2: - update after changes in the public suffix list: '*.bd' is no longer in the p…
first Sep 4, 2026 -
Medium max 5.3SUSE-SU-2026:3972-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Sep 4, 2026 -
Medium max 5.3SUSE-SU-2026:3970-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Sep 4, 2026 -
Medium max 5.6SUSE-SU-2026:3969-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 4, 2026 -
Medium max 4.0SUSE-SU-2026:3964-1 1 CVE
Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3963-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3962-1 1 CVE
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issue: - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop (bsc#1271995).
first Sep 3, 2026 -
UnscoredSUSE-SU-2026:3961-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC…
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:3960-1 1 CVE
Security update for file-roller
This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:3959-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: denial of service via uncontrolled memory allocation from craft…
first Sep 3, 2026 -
Critical max 9.1SUSE-SU-2026:3958-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-20…
first Sep 3, 2026 -
Medium max 6.8openSUSE-SU-2026:21833-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
High max 7.1openSUSE-SU-2026:21832-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
High max 8.2openSUSE-SU-2026:11769-1 2 CVEs
zstd-jni-1.5.7.16-1.1 on GA media
These are all security issues fixed in the zstd-jni-1.5.7.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.5openSUSE-SU-2026:11768-1 1 CVE
syncthing-2.1.5-1.1 on GA media
These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 6.8openSUSE-SU-2026:11766-1 1 CVE
hauler-2.1.0-4.1 on GA media
These are all security issues fixed in the hauler-2.1.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.8
docker-29.7.2_ce-41.1 on GA media
These are all security issues fixed in the docker-29.7.2_ce-41.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 4.6openSUSE-SU-2026:11764-1 2 CVEs
coreutils-9.11-5.1 on GA media
These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
Medium max 6.0openSUSE-SU-2026:11763-1 1 CVE
ant-1.10.18-1.1 on GA media
These are all security issues fixed in the ant-1.10.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 8.3openSUSE-SU-2026:11767-1 2 CVEs
bson-devel-2.5.3-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2026 -
High max 7.8openSUSE-SU-2026:21828-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
Medium max 5.9openSUSE-SU-2026:21827-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Critical max 10.0openSUSE-SU-2026:21824-1 39 CVEs
Security update for containerized-data-importer1.65
This update for containerized-data-importer1.65 fixes the following issues: - CVE-2025-22869: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#12386…
first Sep 9, 2026 -
Critical max 9.8openSUSE-SU-2026:21823-1 12 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-authori…
first Sep 9, 2026 -
Low max 3.8openSUSE-SU-2026:21820-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
High max 7.5openSUSE-SU-2026:21818-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
High max 8.2openSUSE-SU-2026:11757-1 2 CVEs
python312-3.12.14-1.1 on GA media
These are all security issues fixed in the python312-3.12.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11762-1 1 CVE
yast2-samba-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-samba-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8openSUSE-SU-2026:11761-1 11 CVEs
tomcat11-11.0.25-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8openSUSE-SU-2026:11760-1 11 CVEs
tomcat10-10.1.59-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8openSUSE-SU-2026:11759-1 11 CVEs
tomcat-9.0.121-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.6openSUSE-SU-2026:11758-1 1 CVE
steampipe-2.4.6-1.1 on GA media
These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 8.2openSUSE-SU-2026:11756-1 4 CVEs
python311-3.11.16-1.1 on GA media
These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11755-1 2 CVEs
python313-python-gnupg-0.5.6-2.1 on GA media
These are all security issues fixed in the python313-python-gnupg-0.5.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8openSUSE-SU-2026:11754-1 3 CVEs
perl-DBI-1.653.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Medium max 6.5openSUSE-SU-2026:11753-1 1 CVE
libBasicUsageEnvironment2-2026.08.25-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2026.08.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026