35,526 results · Feed
-
High max 8.1SUSE-SU-2026:5100-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:5099-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
first Nov 4, 2026 -
High max 8.8SUSE-SU-2026:5098-1 3 CVEs
Security update for xdg-desktop-portal
This update for xdg-desktop-portal fixes the following issues: - CVE-2026-40354: file deletion via symlink attack (bsc#1262045). - CVE-2026-55888: arbitrary file access due to `SaveFiles` `files` option path traversal (bsc#1287724). - CVE-2026-55889: drag-and…
first Nov 4, 2026 -
High max 8.1SUSE-SU-2026:3509-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security i…
-
High max 7.8SUSE-SU-2026:5097-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 (bsc#1286763). - Fix build against renamed -nvidia64kb flavor (bsc#1282794). - Fix build against Linux 7.3.0 (RC) (bsc#1278022). - Re-disabled CX…
-
High max 7.8SUSE-SU-2026:5096-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 (bsc#1286763). - Fix build against renamed -nvidia64kb flavor (bsc#1282794). - Fix build against Linux 7.3.0 (RC) (bsc#1278022). - Re-disabled CX…
-
Medium max 5.6SUSE-SU-2026:5095-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-109964: heap buffer overwrite in PICT decoder on 32-bit systems (bsc#1285423).
-
High max 7.8SUSE-SU-2026:5094-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
-
Critical max 9.1SUSE-SU-2026:5093-1 2 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). - CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067).
-
High max 7.1SUSE-SU-2026:5092-1 1 CVE
Security update for valkey
This update for valkey fixes the following issues: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Valkey cluster publis…
-
Medium max 5.5openSUSE-SU-2026:12406-1 1 CVE
python313-imagecodecs-2026.10.10-2.1 on GA media
These are all security issues fixed in the python313-imagecodecs-2026.10.10-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12402-1 2 CVEs
mdbook-0.5.4-1.1 on GA media
These are all security issues fixed in the mdbook-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.8SUSE-SU-2026:24513-1 79 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: - Update CUDA and non-CUDA variant to 580.196.07 (bsc#1286887). - Added CVEs for security release 580.178.04 (bsc#1270255): CVE-2026-47587, CVE-2026-47567, CVE-2026-47566, CVE-2026-4759…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24506-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
High max 8.7openSUSE-SU-2026:22221-1 2 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - Update google.golang.org/grpc to which fixes: * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22220-1 4 CVEs
Security update for libosmocore
This update for libosmocore fixes the following issues: Changes in libosmocore: - Update to release 1.14.2 * Fix buffer overflows/overreads in `bssgp_rx_paging`, `parse_process_uss_req`, `osmo_dec_gcr`, `osmo_pbit2ubit`, in the CBSP WRITE-REPLACE decoder, and…
first Nov 2, 2026 -
High max 7.1openSUSE-SU-2026:22219-1 7 CVEs
Security update for python-pypdf
This update for python-pypdf fixes the following issues: Changes in python-pypdf: - CVE-2026-119209: negative /Index values and multiplied xref streams can lead to clamp bypass and server memory exhaustion (bsc#1288950) - CVE-2026-119208: trusting forged /Cou…
first Nov 2, 2026 -
Critical max 9.1openSUSE-SU-2026:22218-1 2 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor.tar to address: * bsc#1288588, CVE-2026-116591: github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic *…
first Nov 2, 2026 -
Medium max 5.4openSUSE-SU-2026:22216-1 8 CVEs
Security update for libreoffice
This update for libreoffice fixes the following issues: Changes in libreoffice: - Upgrade to 26.8.1.1. - Perfect spec file sync between Factory, SLE and Leap 16.X. - Update to LibreOffice 26.2.5.1 (was 25.2.5.2). - Fix the following security issues: * CVE-202…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12409-1 1 CVE
rustup-1.29.2~0-1.1 on GA media
These are all security issues fixed in the rustup-1.29.2~0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 8.6openSUSE-SU-2026:12407-1 4 CVEs
python313-mistune-3.4.0-2.1 on GA media
These are all security issues fixed in the python313-mistune-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12396-1 4 CVEs
expat-2.10.0-1.1 on GA media
These are all security issues fixed in the expat-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:24511-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24505-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.6openSUSE-SU-2026:22215-1 21 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 156.0.8078.79 (boo#1288840): * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill…
first Nov 1, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Nov 1, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
High max 7.5openSUSE-SU-2026:12412-1 1 CVE
tftp-5.4-1.1 on GA media
These are all security issues fixed in the tftp-5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 6.9openSUSE-SU-2026:12411-1 4 CVEs
libtesseract5-5.5.4-2.1 on GA media
These are all security issues fixed in the libtesseract5-5.5.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 6.1openSUSE-SU-2026:12410-1 1 CVE
schismtracker-20261102-1.1 on GA media
These are all security issues fixed in the schismtracker-20261102-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 5.3openSUSE-SU-2026:12408-1 1 CVE
python313-opentelemetry-api-1.45.1-1.1 on GA media
These are all security issues fixed in the python313-opentelemetry-api-1.45.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
UnscoredopenSUSE-SU-2026:12405-1 0 CVEs
perl-Plack-Middleware-ReverseProxy-0.170.0-1.1 on GA media
These are all security issues fixed in the perl-Plack-Middleware-ReverseProxy-0.170.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Critical max 9.1openSUSE-SU-2026:12404-1 2 CVEs
perl-ExtUtils-Typemaps-Default-1.70.0-1.1 on GA media
These are all security issues fixed in the perl-ExtUtils-Typemaps-Default-1.70.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 5.9openSUSE-SU-2026:12403-1 4 CVEs
netty-tcnative-2.0.85-1.1 on GA media
These are all security issues fixed in the netty-tcnative-2.0.85-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 5.9openSUSE-SU-2026:12401-1 7 CVEs
mariadb-java-client-3.5.11-1.1 on GA media
These are all security issues fixed in the mariadb-java-client-3.5.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.1openSUSE-SU-2026:12400-1 1 CVE
libnfs-devel-6.0.2-2.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 6.5openSUSE-SU-2026:12399-1 1 CVE
libjpeg-turbo-3.2.1-86.1 on GA media
These are all security issues fixed in the libjpeg-turbo-3.2.1-86.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.4openSUSE-SU-2026:12398-1 3 CVEs
hostapd-2.12-1.1 on GA media
These are all security issues fixed in the hostapd-2.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
High max 7.0openSUSE-SU-2026:12397-1 2 CVEs
heimdall-2.2.2-1.1 on GA media
These are all security issues fixed in the heimdall-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026 -
Medium max 6.1openSUSE-SU-2026:12395-1 1 CVE
afflib-devel-3.7.23-1.1 on GA media
These are all security issues fixed in the afflib-devel-3.7.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2026