35,560 results · Feed
-
High max 8.8openSUSE-SU-2026:11752-1 5 CVEs
kubevirt1.9-container-disk-1.9.0-3.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11751-1 1 CVE
google-osconfig-agent-20260908.00-2.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8
chromedriver-153.0.8010.36-1.1 on GA media
These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
High max 7.5openSUSE-SU-2026:11749-1 9 CVEs
strongswan-6.1.0-1.1 on GA media
These are all security issues fixed in the strongswan-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.2openSUSE-SU-2026:11748-1 7 CVEs
python315-3.15.0~rc2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~rc2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.2openSUSE-SU-2026:11747-1 3 CVEs
python310-3.10.21-1.1 on GA media
These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.8openSUSE-SU-2026:11746-1 1 CVE
python313-modelscope-hub-0.4.2-1.1 on GA media
These are all security issues fixed in the python313-modelscope-hub-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
Critical max 9.1openSUSE-SU-2026:11745-1 5 CVEs
perl-HTML-FormHandler-0.410.2-1.1 on GA media
These are all security issues fixed in the perl-HTML-FormHandler-0.410.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11744-1 7 CVEs
libpcap-devel-1.10.7-1.1 on GA media
These are all security issues fixed in the libpcap-devel-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11743-1 2 CVEs
google-osconfig-agent-20260908.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11742-1 1 CVE
google-guest-agent-20260903.01-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20260903.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 7.5openSUSE-SU-2026:11741-1 5 CVEs
cargo-c-0.10.25-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 8.7openSUSE-SU-2026:11740-1 2 CVEs
azure-storage-azcopy-10.32.8-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
Critical max 9.8openSUSE-SU-2026:11739-1 8 CVEs
389-ds-3.3.1+8c2711bd6-1.1 on GA media
These are all security issues fixed in the 389-ds-3.3.1+8c2711bd6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
High max 7.5openSUSE-SU-2026:11729-1 1 CVE
ansible-creator-26.8.0-1.1 on GA media
These are all security issues fixed in the ansible-creator-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:3952-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 3, 2026 -
Critical max 9.8openSUSE-SU-2026:21801-1 10 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates (bsc#1258543). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/r…
first Sep 7, 2026 -
High max 8.8openSUSE-SU-2026:11738-1 3 CVEs
xen-4.22.0_04-1.1 on GA media
These are all security issues fixed in the xen-4.22.0_04-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
Medium max 5.3SUSE-SU-2026:3951-1 1 CVE
Security update for erlang
This update for erlang fixes the following issue: - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc#1262503).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3947-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.5.8. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3944-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3935-1 2 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop (bsc#1273145). - CVE-2026-64612: authentica…
first Sep 3, 2026 -
High max 7.2SUSE-SU-2026:3917-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 1, 2026 -
High max 8.7SUSE-SU-2026:3910-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (bsc#1275459). - CVE-2026-59893: Inefficient Regex Handling of Dollar-Quo…
first Sep 1, 2026 -
Medium max 5.1SUSE-SU-2026:3900-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3887-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3885-1 18 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-40691: DoS due to heap overflow via single bad DNSCrypt query over TCP (bsc#1271875). - CVE-2026-42955: Ghost domain window can be extended by up t…
first Aug 31, 2026 -
Critical max 9.8openSUSE-SU-2026:21809-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
UnscoredopenSUSE-SU-2026:21808-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). Non security issues fixed: - Econf parser adds tags in drop-in files outsi…
first Sep 8, 2026 -
High max 7.5openSUSE-SU-2026:11735-1 1 CVE
perl-Protocol-HTTP2-1.140.0-1.1 on GA media
These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
Critical max 9.8openSUSE-SU-2026:11734-1 1 CVE
perl-Authen-SASL-2.210.0-1.1 on GA media
These are all security issues fixed in the perl-Authen-SASL-2.210.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5openSUSE-SU-2026:11733-1 5 CVEs
expat-2.8.4-1.1 on GA media
These are all security issues fixed in the expat-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.7openSUSE-SU-2026:11731-1 6 CVEs
containerized-data-importer1.65-api-1.65.0-3.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 7.5openSUSE-SU-2026:11730-1 5 CVEs
cargo-audit-0.22.2~git0.281452c-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.22.2~git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
UnscoredSUSE-SU-2026:3955-1 0 CVEs
Security update for kubevirt, virt-pr-helper-container
This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: - Package the persistent-reservation helper's entrypoint script (bsc#1276520): virt-operator runs the pr-helper container with the command /entrypoint.sh, whic…
first Sep 3, 2026 -
UnscoredSUSE-SU-2026:3954-1 0 CVEs
Security update for cosign
This update for cosign rebuilds it against the current go security release.
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3953-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3949-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.7.2. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3948-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.6.7. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.0SUSE-SU-2026:3946-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.4.17. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026