35,581 results · Feed
-
Low max 2.0openSUSE-SU-2026:11461-1 1 CVE
fuse-overlayfs-1.17-1.1 on GA media
These are all security issues fixed in the fuse-overlayfs-1.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:3520-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 6, 2026 -
High max 8.1SUSE-SU-2026:3518-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).
first Aug 6, 2026 -
High max 7.2openSUSE-SU-2026:11467-1 10 CVEs
python313-aiohttp-3.14.3-1.1 on GA media
These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
Critical max 9.0openSUSE-SU-2026:11463-1 2 CVEs
libXfont2-2-2.0.7-3.1 on GA media
These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 7.6openSUSE-SU-2026:11462-1 1 CVE
gleam-1.18.1-1.1 on GA media
These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:3521-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 6, 2026 -
High max 8.6SUSE-SU-2026:3517-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2022-3094: UPDATE message flood may cause `named` to exhaust all available memory (bsc#1207471). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-…
first Aug 6, 2026 -
High max 8.8openSUSE-SU-2026:11465-1 4 CVEs
python313-Django4-4.2.30-5.1 on GA media
These are all security issues fixed in the python313-Django4-4.2.30-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 8.8openSUSE-SU-2026:11466-1 4 CVEs
python313-GitPython-3.1.58-1.1 on GA media
These are all security issues fixed in the python313-GitPython-3.1.58-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
High max 8.8openSUSE-SU-2026:11464-1 4 CVEs
python313-Django-6.0.8-1.1 on GA media
These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
UnscoredSUSE-SU-2026:3516-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Aug 6, 2026 -
Critical max 9.1openSUSE-SU-2026:11468-1 6 CVEs
python313-cryptography-50.0.0-1.1 on GA media
These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2026 -
UnscoredSUSE-SU-2026:3515-1 0 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Aug 6, 2026 -
High max 8.1openSUSE-SU-2026:21535-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…
first Aug 5, 2026 -
High max 7.5openSUSE-SU-2026:21534-1 16 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…
first Aug 5, 2026 -
Medium max 5.3openSUSE-SU-2026:21533-1 7 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.html#change-1.9.15 - https://www.dnsdist.org/changelog.html#change-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output pr…
first Aug 5, 2026 -
High max 8.1openSUSE-SU-2026:21532-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…
first Aug 5, 2026 -
UnscoredopenSUSE-SU-2026:11459-1 1 CVE
python313-pyzmq-27.1.0-3.1 on GA media
These are all security issues fixed in the python313-pyzmq-27.1.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 7.5openSUSE-SU-2026:11457-1 2 CVEs
perl-Date-Manip-6.990.0-2.1 on GA media
These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 8.7openSUSE-SU-2026:11456-1 1 CVE
open-isns-0.103+4.60de8b5-1.1 on GA media
These are all security issues fixed in the open-isns-0.103+4.60de8b5-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:3510-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543:…
first Aug 5, 2026 -
High max 8.8openSUSE-SU-2026:11454-1 6 CVEs
libssh2-1-1.11.1-4.1 on GA media
These are all security issues fixed in the libssh2-1-1.11.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 7.5openSUSE-SU-2026:11460-1 13 CVEs
libwireshark19-4.6.7-3.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
Medium max 5.5openSUSE-SU-2026:11455-1 1 CVE
libvirt-12.6.0-1.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 7.5openSUSE-SU-2026:11453-1 10 CVEs
java-1_8_0-openjdk-1.8.0.502-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
Critical max 9.1openSUSE-SU-2026:11452-1 4 CVEs
agama-integration-tests-1785848065.5562c7c-4.1 on GA media
These are all security issues fixed in the agama-integration-tests-1785848065.5562c7c-4.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:3514-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Update to version 8.2.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security i…
first Aug 5, 2026 -
Medium max 6.6SUSE-SU-2026:3512-1 1 CVE
Security update for evince
This update for evince fixes the following issue: - CVE-2026-63729: texlive: heap use-after-free in `synctex_parser.c` via a malformed `.synctex` or `.synctex.gz` file (bsc#1272433).
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3501-1 56 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.6.7: - CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757). - CVE-2026-5401: AFP dissector crash (bsc#1263756). - CVE-2026-5402: TLS dissector crash and possible code execution (bsc#126…
first Aug 5, 2026 -
Critical max 9.0SUSE-SU-2026:3499-1 2 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…
first Aug 5, 2026 -
Medium max 6.3openSUSE-SU-2026:11458-1 1 CVE
jupyter-nbdime-7.0.4-24.1 on GA media
These are all security issues fixed in the jupyter-nbdime-7.0.4-24.1 package on the GA media of openSUSE Tumbleweed.
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:3513-1 2 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543:…
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3508-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3507-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3506-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3505-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 5, 2026 -
High max 8.7SUSE-SU-2026:3504-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).
first Aug 5, 2026 -
High max 8.8SUSE-SU-2026:3503-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups (bsc#1272997). - CVE-2026-15337: potential denial-of-service vulnerability in `check_for_language()` (bsc#1272998). - CV…
first Aug 5, 2026 -
UnscoredSUSE-SU-2026:3502-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Aug 5, 2026