35,581 results · Feed
-
High max 8.8openSUSE-SU-2026:11545-1 9 CVEs
ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Critical max 9.8openSUSE-SU-2026:11551-1 4 CVEs
perl-Net-OAuth-0.330.0-1.1 on GA media
These are all security issues fixed in the perl-Net-OAuth-0.330.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.5openSUSE-SU-2026:11550-1 1 CVE
perl-Net-CIDR-Set-0.230.0-1.1 on GA media
These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.4openSUSE-SU-2026:11547-1 4 CVEs
gimp-3.2.4-4.1 on GA media
These are all security issues fixed in the gimp-3.2.4-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.1openSUSE-SU-2026:11544-1 1 CVE
apptainer-1.5.3-2.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.5SUSE-SU-2026:3662-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 20, 2026 -
High max 7.5SUSE-SU-2026:3652-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11555-1 25 CVEs
postgresql17-17.11-1.1 on GA media
These are all security issues fixed in the postgresql17-17.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Medium max 5.5openSUSE-SU-2026:11549-1 1 CVE
markdown-oxide-0.25.12-1.1 on GA media
These are all security issues fixed in the markdown-oxide-0.25.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Critical max 9.6openSUSE-SU-2026:11548-1 1 CVE
glab-1.114.0-1.1 on GA media
These are all security issues fixed in the glab-1.114.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11554-1 25 CVEs
postgresql16-16.15-1.1 on GA media
These are all security issues fixed in the postgresql16-16.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 8.8openSUSE-SU-2026:11553-1 24 CVEs
postgresql15-15.19-1.1 on GA media
These are all security issues fixed in the postgresql15-15.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Medium max 5.5openSUSE-SU-2026:21605-1 3 CVEs
Security update for forgejo-cli
This update for forgejo-cli fixes the following issues: Changes in forgejo-cli: - Update vendored bytes crate to 1.12.1 * CVE-2026-25541: Fixed an integer overflow in BytesMut::reserve that could corrupt the tracked capacity and lead to out-of-bounds slices (…
first Aug 18, 2026 -
Critical max 9.6openSUSE-SU-2026:21592-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.13 (released 2026-08-13, bsc#1244485). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive st…
first Aug 19, 2026 -
Critical max 10.0openSUSE-SU-2026:21590-1 25 CVEs
Security update for kubevirt1.8
This update for kubevirt1.8 fixes the following issues: Update to version 1.8.4. Security issues fixed: - CVE-2026-13201: virt-handler-rhel9: kubevirt: safepath `OpenAtNoFollow` symlink following via `/proc/self/fd` allows host file metadata modification (bsc…
first Aug 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11560-1 21 CVEs
erlang27-27.1.3-3.1 on GA media
These are all security issues fixed in the erlang27-27.1.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
Critical max 9.1openSUSE-SU-2026:11559-1 24 CVEs
erlang-28.5.0.4-1.1 on GA media
These are all security issues fixed in the erlang-28.5.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
High max 8.1openSUSE-SU-2026:21606-1 1 CVE
Security update for python-unearth
This update for python-unearth fixes the following issues: Changes in python-unearth: - CVE-2026-73030: `is_within_directory` function fails to normalize paths before validation and allows `../` sequences to bypass directory containment checks (bsc#1275440)
first Aug 18, 2026 -
Critical max 9.1openSUSE-SU-2026:21603-1 7 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below (bsc#1253576): * CVE-2025-47913: golang.org/x/crypto/ssh/agent client process termination on an unexpec…
first Aug 18, 2026 -
High max 7.5openSUSE-SU-2026:21602-1 2 CVEs
Security update for python-pytest-html
This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor browserslist to fix the following: * CVE-2026-73088: unguarded for...in loop over untrusted JSON keys in normalizeStats() function leads to prototype poll…
first Aug 18, 2026 -
Critical max 9.9openSUSE-SU-2026:21599-1 6 CVEs
Security update for kitty
This update for kitty fixes the following issues: Changes in kitty: - Update to 0.48.2: * Wayland: Fix regression in previous release that broke drag and drop on Plasma (#10284) * diff kitten: Fix a rare crash when showing a large diff due to incorrect lockin…
first Aug 18, 2026 -
High max 8.7openSUSE-SU-2026:21595-1 8 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
Critical max 9.8openSUSE-SU-2026:21594-1 31 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalati…
first Aug 19, 2026 -
Critical max 9.6openSUSE-SU-2026:21593-1 9 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 (released 2026-08-13, bsc#1255111). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive str…
first Aug 19, 2026 -
Critical max 9.8openSUSE-SU-2026:11558-1 31 CVEs
MozillaThunderbird-140.14.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
High max 8.7openSUSE-SU-2026:11557-1 4 CVEs
python313-sqlparse-0.6.0-1.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
High max 7.5openSUSE-SU-2026:11556-1 2 CVEs
python313-hpack-4.2.0-1.1 on GA media
These are all security issues fixed in the python313-hpack-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
UnscoredSUSE-SU-2026:3661-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current go security release.
first Aug 20, 2026 -
UnscoredSUSE-SU-2026:3660-1 0 CVEs
Security update for kubernetes
This update for kubernetes rebuilds it against the current go security release.
first Aug 20, 2026 -
UnscoredSUSE-SU-2026:3659-1 0 CVEs
Security update for kubernetes-old
This update for kubernetes-old rebuilds it against the current go security release.
first Aug 20, 2026 -
Critical max 9.1SUSE-SU-2026:3657-1 33 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under 'use chroot = no' (bsc#1269042). …
first Aug 20, 2026 -
Medium max 6.3SUSE-SU-2026:3655-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - Regression in `http.cookies` (bsc#1263083).
first Aug 20, 2026 -
Critical max 10.0SUSE-SU-2026:3658-1 58 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 (bsc#1274867) - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escalat…
first Aug 20, 2026 -
UnscoredSUSE-SU-2026:3654-1 0 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current go security release.
first Aug 20, 2026 -
UnscoredSUSE-SU-2026:3651-1 0 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712, bsc#1271713).
first Aug 19, 2026 -
High max 8.7SUSE-SU-2026:3649-1 13 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
Medium max 6.3SUSE-SU-2026:3648-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - Regression in `http.cookies` (bsc#1263083).
first Aug 19, 2026 -
High max 8.5SUSE-SU-2026:3647-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: - CVE-2026-44943: remote file-write as root via discovery (bsc#1268353). - CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352). Changes for open-iscsi: - Update to version 2.1.12.suse+0.8f77…
first Aug 19, 2026 -
Critical max 9.1SUSE-SU-2026:3645-1 19 CVEs
Security update for erlang
This update for erlang fixes the following issues: - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning (bsc#1261726). - CVE-2026-42789: `public_key` application accepts non-CA certificates as intermediate issuers and this enables c…
first Aug 18, 2026 -
Critical max 9.8openSUSE-SU-2026:11543-1 10 CVEs
xrdp-0.10.6.1-1.1 on GA media
These are all security issues fixed in the xrdp-0.10.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026