35,560 results · Feed
-
Critical max 9.8openSUSE-SU-2026:11628-1 327 CVEs
chromedriver-152.0.7977.64-1.1 on GA media
These are all security issues fixed in the chromedriver-152.0.7977.64-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Medium max 4.8openSUSE-SU-2026:11627-1 1 CVE
bzip2-1.0.8-6.1 on GA media
These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed.
first Aug 28, 2026 -
Medium max 6.9openSUSE-SU-2026:21666-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).
first Aug 27, 2026 -
High max 7.8openSUSE-SU-2026:11622-1 2 CVEs
libvirt-12.6.0-2.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
High max 7.5openSUSE-SU-2026:21665-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only UR…
first Aug 27, 2026 -
High max 8.7openSUSE-SU-2026:11626-1 1 CVE
python313-starlette-1.6.0-1.1 on GA media
These are all security issues fixed in the python313-starlette-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Medium max 5.3openSUSE-SU-2026:11625-1 1 CVE
python313-djangorestframework-3.18.0-2.1 on GA media
These are all security issues fixed in the python313-djangorestframework-3.18.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Medium max 6.3openSUSE-SU-2026:11624-1 1 CVE
python313-django-oauth-toolkit-3.4.1-1.1 on GA media
These are all security issues fixed in the python313-django-oauth-toolkit-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Critical max 9.8openSUSE-SU-2026:11623-1 11 CVEs
libopenssl-3-devel-3.5.3-8.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
High max 7.5openSUSE-SU-2026:11621-1 4 CVEs
java-25-openjdk-25.0.4.1-1.1 on GA media
These are all security issues fixed in the java-25-openjdk-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Medium max 6.8openSUSE-SU-2026:11620-1 3 CVEs
java-21-openjdk-21.0.12.1-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
High max 7.5openSUSE-SU-2026:11619-1 6 CVEs
grafana-12.4.5-4.1 on GA media
These are all security issues fixed in the grafana-12.4.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Medium max 4.6openSUSE-SU-2026:11618-1 3 CVEs
cpio-2.15-8.1 on GA media
These are all security issues fixed in the cpio-2.15-8.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
High max 8.2openSUSE-SU-2026:11617-1 17 CVEs
coturn-4.17.2-1.1 on GA media
These are all security issues fixed in the coturn-4.17.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2026 -
Medium max 6.9openSUSE-SU-2026:21670-1 3 CVEs
Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.8.2 * Update vendor archive to fix github.com/go-chi/chi/v5 (boo#1276196, CVE-2026-72815, CVE-2026-72816, CVE-2026-72817) * Add OpenRC support * Migrate c…
first Aug 27, 2026 -
Medium max 5.4openSUSE-SU-2026:21669-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issues: Changes in wicked: - Fix two OOB reads in ni_capture_inspect_udp_header and improve: - Reject packets with ip_len < ihl to avoid a size_t underflow of the UDP length, which the checksum truncates to uint16_t …
first Aug 27, 2026 -
Medium max 6.5openSUSE-SU-2026:21667-1 1 CVE
Security update for file-roller
This update for file-roller fixes the following issues: Changes in file-roller: - CVE-2026-78322: Check line length when parsing command output (bsc#1276442).
first Aug 27, 2026 -
High max 8.9openSUSE-SU-2026:21660-1 3 CVEs
Security update for tor
This update for tor fixes the following issues: Changes in tor: - Update to 0.4.9.11 * Major bugfixes + onion services: Prevent a race condition (boo#1275918, CVE-2026-77638) + client: no longer assert and exit if an onion service encodes an all-zero public k…
first Aug 25, 2026 -
Critical max 9.6openSUSE-SU-2026:21653-1 5 CVEs
Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.53.0 * Add X-Forwarded-For support to gRPC transport * Add Stream based Packet Addr for UDP Connections * rrpit: compact session, async send, session recovery …
first Aug 25, 2026 -
Medium max 6.9openSUSE-SU-2026:21645-1 3 CVEs
Security update for trivy
This update for trivy fixes the following issue: - CVE-2026-72815,CVE-2026-72816,CVE-2026-72817: github.com/go-chi/chi/v5: multiple IP spoofing vulnerabilities allow authentication bypass, authorization override, and log forgery (bsc#1276128). Changes for tri…
first Aug 25, 2026 -
High max 8.7openSUSE-SU-2026:21644-1 4 CVEs
Security update for libheif
This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…
first Aug 25, 2026 -
Medium max 5.6openSUSE-SU-2026:21643-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 25, 2026 -
High max 7.0openSUSE-SU-2026:21641-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: Update to 26.02. - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065).
first Aug 25, 2026 -
High max 7.5openSUSE-SU-2026:21640-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 3.1 (bsc#1274715). Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398). - CVE-2026-26962: rack:…
first Aug 25, 2026 -
High max 7.5openSUSE-SU-2026:21639-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 24, 2026 -
High max 8.7openSUSE-SU-2026:21638-1 7 CVEs
Security update for snphost
This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…
first Aug 24, 2026 -
High max 8.8openSUSE-SU-2026:21636-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 24, 2026 -
Medium max 5.7openSUSE-SU-2026:21635-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004). - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). -…
first Aug 24, 2026 -
Medium max 5.9openSUSE-SU-2026:21634-1 3 CVEs
Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized `encaps_derand` pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed o…
first Aug 24, 2026 -
High max 8.2openSUSE-SU-2026:21633-1 1 CVE
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
first Aug 24, 2026 -
UnscoredopenSUSE-SU-2026:21631-1 0 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory (bsc#1254340) - Fix out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (bsc#1254341) - Fix buffer overrun in archive_le32dec when reading trunc…
first Aug 24, 2026 -
Medium max 6.5openSUSE-SU-2026:21629-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).
first Aug 24, 2026 -
Critical max 9.4openSUSE-SU-2026:21626-1 1 CVE
Security update for qt6-svg
This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing `pattern` group nodes (bsc#1250994).
first Aug 24, 2026 -
Medium max 5.5openSUSE-RU-2026:21658-1 1 CVE
Recommended update for sequoia-sq
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only * LICENSE.txt confirms it * Correct Legal-Review-Notice usage - Update dependencies due to security issues …
first Aug 25, 2026 -
Critical max 9.1SUSE-SU-2026:23253-1 37 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). - CVE-2026-53785: --relative implied-parent creation…
first Aug 24, 2026 -
Low max 2.0SUSE-SU-2026:23252-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation (bsc#1273100).
first Aug 24, 2026 -
Medium max 5.5SUSE-SU-2026:23251-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder socket (bsc#1273922). - CVE…
first Aug 21, 2026 -
High max 7.0SUSE-SU-2026:23250-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
High max 7.5SUSE-SU-2026:23249-1 5 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-32728: fix logic error in DisableForwarding option (bsc#1241012). - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a fil…
first Aug 21, 2026 -
High max 8.7SUSE-SU-2026:23247-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549). - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-buildi…
first Aug 19, 2026