35,560 results · Feed
-
High max 8.8openSUSE-SU-2026:21702-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21701-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21700-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21699-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21692-1 4 CVEs
Security update for dhcpcd
This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service (bsc#1268980). - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte sta…
first Aug 30, 2026 -
High max 7.1openSUSE-SU-2026:21687-1 3 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Aug 30, 2026 -
High max 7.8openSUSE-SU-2026:21704-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the `as-user` option in the `org.freedesktop.UDisks2.Filesystem.Mount()` D-Bus method can lead to local privilege escalation (bsc#1274430).
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21703-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
Critical max 9.6openSUSE-SU-2026:21696-1 9 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing…
first Aug 30, 2026 -
Medium max 6.8openSUSE-SU-2026:21694-1 1 CVE
Security update for librest
This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).
first Aug 30, 2026 -
Medium max 5.3openSUSE-SU-2026:21693-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).
first Aug 30, 2026 -
High max 8.8openSUSE-SU-2026:21691-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 3.0.6~git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted oversized LDAP UNBIND packet (bsc#1270695). - CVE-2026-11611: unboun…
first Aug 30, 2026 -
High max 8.7openSUSE-SU-2026:21690-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893:…
first Aug 30, 2026 -
Medium max 6.9openSUSE-SU-2026:21689-1 6 CVEs
Security update for gstreamer-devtools
This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subsc…
first Aug 30, 2026 -
High max 8.7openSUSE-SU-2026:21685-1 3 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS#7 `EnvelopedData` decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (bsc#1273551). - CVE-2026-69248: verifier accepts wildcard DNS names …
first Aug 30, 2026 -
Low max 2.3openSUSE-SU-2026:21681-1 1 CVE
Security update for rav1e
This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and terminal manipulation (bsc#1249016). Changes for rav1e: - Update cargo dependencies.
first Aug 30, 2026 -
High max 8.6openSUSE-SU-2026:11648-1 1 CVE
kernel-devel-7.2.2-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 30, 2026 -
Medium max 5.3openSUSE-SU-2026:11647-1 1 CVE
httpcomponents-client-4.5.14-2.1 on GA media
These are all security issues fixed in the httpcomponents-client-4.5.14-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 30, 2026 -
Medium max 4.6openSUSE-SU-2026:21675-1 1 CVE
Security update for broot
This update for broot fixes the following issues: Changes in broot: - v1.59.0 (CVE-2026-72847 boo#1275994) * new shell_command verb attribute: run a command through a shell (sh -c / cmd /C) so &&, ; and pipes work, without leaving broot - Fix #1145 * fix inva…
first Aug 28, 2026 -
Medium max 5.3openSUSE-SU-2026:21674-1 1 CVE
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: * plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes (stale-cache races, AXFR zone contamination, DoH health-…
first Aug 28, 2026 -
High max 7.0openSUSE-SU-2026:11644-1 2 CVEs
lact-0.10.0-1.1 on GA media
These are all security issues fixed in the lact-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 8.7openSUSE-SU-2026:11638-1 2 CVEs
jackson-core-2.18.9-2.1 on GA media
These are all security issues fixed in the jackson-core-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
Critical max 9.1openSUSE-SU-2026:21672-1 5 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2025-49506: hash/password content leak via side channel timing attack against `apr_password_validate()` (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL …
first Aug 28, 2026 -
High max 8.6openSUSE-SU-2026:21671-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
Medium max 5.1openSUSE-SU-2026:11646-1 1 CVE
wget-1.25.0-7.1 on GA media
These are all security issues fixed in the wget-1.25.0-7.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 8.5openSUSE-SU-2026:11645-1 1 CVE
tuxguitar-2.1.0-1.1 on GA media
These are all security issues fixed in the tuxguitar-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.5openSUSE-SU-2026:11643-1 2 CVEs
java-25-openj9-25.0.4.1-1.1 on GA media
These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.5openSUSE-SU-2026:11642-1 2 CVEs
java-21-openj9-21.0.12.1-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.5openSUSE-SU-2026:11641-1 2 CVEs
java-1_8_0-openj9-1.8.0.504-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.5openSUSE-SU-2026:11640-1 2 CVEs
java-17-openj9-17.0.20.1-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.5openSUSE-SU-2026:11639-1 2 CVEs
java-11-openj9-11.0.32.1-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
High max 7.8openSUSE-SU-2026:11637-1 1 CVE
emacs-31.1-1.1 on GA media
These are all security issues fixed in the emacs-31.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2026 -
Medium max 5.4openSUSE-SU-2026:11636-1 2 CVEs
wicked-0.6.80-2.1 on GA media
These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
High max 7.5openSUSE-SU-2026:11635-1 1 CVE
python313-uv-0.12.7-1.1 on GA media
These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
High max 8.6openSUSE-SU-2026:11634-1 5 CVEs
jupyter-jupyterlab-4.5.10-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-4.5.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Medium max 6.1openSUSE-SU-2026:11633-1 1 CVE
php-composer2-2.10.3-1.1 on GA media
These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Medium max 6.8openSUSE-SU-2026:11632-1 1 CVE
owasp-modsecurity-crs-4.29.0-1.1 on GA media
These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Critical max 9.6openSUSE-SU-2026:11631-1 1 CVE
jfrog-cli-2.122.0-1.1 on GA media
These are all security issues fixed in the jfrog-cli-2.122.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
High max 7.5openSUSE-SU-2026:11630-1 13 CVEs
istioctl-1.30.4-1.1 on GA media
These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11629-1 22 CVEs
dovecot24-2.4.5-1.1 on GA media
These are all security issues fixed in the dovecot24-2.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026