35,581 results · Feed
-
Medium max 6.9openSUSE-SU-2026:11489-1 7 CVEs
java-25-openj9-25.0.4.0-1.1 on GA media
These are all security issues fixed in the java-25-openj9-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:11487-1 7 CVEs
java-1_8_0-openj9-1.8.0.502-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:3548-1 9 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 10, 2026 -
Critical max 9.8SUSE-SU-2026:3546-1 33 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.13. - MFSA 2026-72 (bsc#1271649) * CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for forwarding * CVE-2026-15718: Invalid pointer in the Jav…
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:3542-1 7 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490). - CVE-2026-12706: heap use-after-free read in the …
first Aug 10, 2026 -
UnscoredSUSE-SU-2026:3538-1 0 CVEs
Security update for gd
This update for gd fixes the following issue: - CVE-2026-9672: security issues in `libgd` (bsc#1273101).
first Aug 10, 2026 -
Critical max 9.1SUSE-SU-2026:3540-1 3 CVEs
Security update for perl
This update for perl fixes the following issues: - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds (bsc#1266304). - CVE-2026-12087: `Socket`'s `pack_ip_mreq_source()` can copy adjacent heap …
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3537-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtra…
first Aug 10, 2026 -
Low max 3.3SUSE-SU-2026:3428-2 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking direc…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:3536-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially…
first Aug 7, 2026 -
UnscoredSUSE-SU-2026:3535-1 0 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation (bsc#1271712, bsc#1271713).
first Aug 7, 2026 -
UnscoredSUSE-SU-2026:3533-1 0 CVEs
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation (bsc#1271712, bsc#1271713).
first Aug 7, 2026 -
UnscoredSUSE-SU-2026:3534-1 0 CVEs
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation (bsc#1271712, bsc#1271713).
first Aug 7, 2026 -
Medium max 5.5openSUSE-SU-2026:11482-1 1 CVE
wild-0.10.0-2.1 on GA media
These are all security issues fixed in the wild-0.10.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 8.6openSUSE-SU-2026:11480-1 1 CVE
vlang-0.5.2-2.1 on GA media
These are all security issues fixed in the vlang-0.5.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 8.8openSUSE-SU-2026:11483-1 1 CVE
zpaqfranz-64.8-1.1 on GA media
These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.4openSUSE-SU-2026:11481-1 2 CVEs
weechat-4.10.0-1.1 on GA media
These are all security issues fixed in the weechat-4.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.5openSUSE-SU-2026:11479-1 1 CVE
libsdb2_5_0-6.2.0-1.1 on GA media
These are all security issues fixed in the libsdb2_5_0-6.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
UnscoredopenSUSE-SU-2026:11478-1 2 CVEs
python313-pymongo-4.17.0-1.1 on GA media
These are all security issues fixed in the python313-pymongo-4.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Medium max 6.8openSUSE-SU-2026:11477-1 1 CVE
librest-1_0-0-0.10.2-2.1 on GA media
These are all security issues fixed in the librest-1_0-0-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Critical max 9.8openSUSE-SU-2026:11476-1 351 CVEs
kernel-devel-7.1.7-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Medium max 5.5openSUSE-SU-2026:11475-1 3 CVEs
kak-lsp-21.0.2-1.1 on GA media
These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.8openSUSE-SU-2026:11474-1 2 CVEs
gitoxide-0.56.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.56.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 8.8openSUSE-SU-2026:11473-1 4 CVEs
dhcpcd-10.5.0-1.1 on GA media
These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
High max 7.5openSUSE-SU-2026:11472-1 1 CVE
agama-web-ui-23+75.1a877fb50-50.1 on GA media
These are all security issues fixed in the agama-web-ui-23+75.1a877fb50-50.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2026 -
Critical max 9.0openSUSE-SU-2026:21540-1 11 CVEs
Security update for samba
This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the `user.SmbReparse` xattr (bsc#1261188). - CVE-2026-2340: WORM …
first Aug 6, 2026 -
Critical max 9.0openSUSE-SU-2026:21539-1 2 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…
first Aug 6, 2026 -
Medium max 6.4SUSE-SU-2026:22999-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
High max 7.5SUSE-SU-2026:22997-1 1 CVE
Security update for hawk-apiserver
This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 (bsc#1267454) Version 0.1.0+git.1773234993.db3c82f: * handle /cib/live/primitives/<resource_id>/edit in ha…
first Jul 28, 2026 -
Critical max 9.3openSUSE-SU-2026:21538-1 32 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700). - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths…
first Aug 6, 2026 -
High max 8.7SUSE-SU-2026:3530-1 9 CVEs
Security update for python310
This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-3276: quadratic…
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3529-1 7 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490). - CVE-2026-12706: heap use-after-free read in the …
first Aug 7, 2026 -
Critical max 9.6SUSE-SU-2026:3528-1 2 CVEs
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc…
first Aug 7, 2026 -
Medium max 6.5SUSE-SU-2026:3527-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3526-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 7, 2026 -
High max 8.8SUSE-SU-2026:3525-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 7, 2026 -
High max 8.8openSUSE-SU-2026:21543-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups (bsc#1272997) - CVE-2026-15337: potential denial-of-service vulnerability in `check_for_langua…
first Aug 6, 2026 -
Medium max 5.3openSUSE-SU-2026:11471-1 1 CVE
tekton-cli-0.46.0-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 7.5openSUSE-SU-2026:11470-1 1 CVE
python313-pyOpenSSL-26.4.0-1.1 on GA media
These are all security issues fixed in the python313-pyOpenSSL-26.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
Critical max 9.8openSUSE-SU-2026:11469-1 3 CVEs
python313-nltk-3.10.1-1.1 on GA media
These are all security issues fixed in the python313-nltk-3.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026