35,581 results · Feed
-
High max 8.1SUSE-SU-2026:3460-1 1 CVE
Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by `Screen.start()` are not cryptographically secure (bsc#1271868).
first Aug 3, 2026 -
Medium max 5.3SUSE-SU-2026:3459-1 1 CVE
Security update for python3-dulwich
This update for python3-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py (bsc#1271525).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3456-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed (bsc#1272214).
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3477-1 6 CVEs
Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: Potential memory usage beyond configured limit…
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11440-1 11 CVEs
nodejs26-26.5.1-1.1 on GA media
These are all security issues fixed in the nodejs26-26.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
UnscoredSUSE-SU-2026:3457-1 0 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Aug 3, 2026 -
Medium max 5.1SUSE-SU-2026:3455-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free in the `io.c` program file via the `do_getline_redir()` routine (bsc#1271351). - CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352). - CVE-2026-40553…
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3454-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in `parse_date` when processing specially crafted date strings (bsc#1271705).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3453-1 11 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - …
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3452-1 8 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones (bsc#1271982). - CVE-2026-10822: storing a DNS key recor…
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:3451-1 14 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3450-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).
first Aug 3, 2026 -
High max 7.8SUSE-SU-2026:3449-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 3, 2026 -
High max 8.1SUSE-SU-2026:3448-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues: - CVE-2026-42055: heap buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules (bsc#1268492). - CVE-2026-42533: heap buffer overflow in the `map` directive and regex matching (bsc#…
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11439-1 11 CVEs
corepack24-24.18.1-1.1 on GA media
These are all security issues fixed in the corepack24-24.18.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 7.2SUSE-SU-2026:3475-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Aug 3, 2026 -
High max 7.2SUSE-SU-2026:3474-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Aug 3, 2026 -
High max 8.8openSUSE-SU-2026:11441-1 12 CVEs
xen-4.22.0_02-1.1 on GA media
These are all security issues fixed in the xen-4.22.0_02-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11438-1 5 CVEs
alloy-1.18.0-1.1 on GA media
These are all security issues fixed in the alloy-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3476-1 6 CVEs
Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: Potential memory usage beyond configured limit…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3473-1 1 CVE
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266651). Changes for aws-iam-authenticat…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3471-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…
first Aug 3, 2026 -
High max 8.1SUSE-SU-2026:3469-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue: - CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow (bsc#1271514).
first Aug 3, 2026 -
High max 8.4SUSE-SU-2026:3458-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding …
first Aug 3, 2026 -
UnscoredSUSE-SU-2026:3444-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Jul 31, 2026 -
High max 7.5SUSE-SU-2026:3443-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issue: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
first Jul 31, 2026 -
High max 8.1SUSE-SU-2026:3442-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issue: - CVE-2026-61548: parsing of crafted RFC 5424 messages in `mmpstrucdata` can lead to a stack buffer overflow (bsc#1272414).
first Jul 31, 2026 -
High max 8.1SUSE-SU-2026:3441-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
first Jul 31, 2026 -
Critical max 9.1SUSE-SU-2026:3440-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120: Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…
first Jul 31, 2026 -
Critical max 9.6SUSE-SU-2026:3439-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/tex…
first Jul 31, 2026 -
Medium max 5.3openSUSE-SU-2026:11433-1 1 CVE
ImageMagick-7.1.2.28-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.28-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
High max 7.5openSUSE-SU-2026:11437-1 1 CVE
podman-6.0.2-1.1 on GA media
These are all security issues fixed in the podman-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Critical max 9.3openSUSE-SU-2026:11436-1 4 CVEs
golang-github-prometheus-prometheus-3.13.2-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
UnscoredopenSUSE-SU-2026:11435-1 0 CVEs
gd-2.3.3-5.1 on GA media
These are all security issues fixed in the gd-2.3.3-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Critical max 9.6openSUSE-SU-2026:11434-1 370 CVEs
chromedriver-151.0.7922.71-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.71-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
Low max 2.3openSUSE-SU-2026:21515-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)
first Jul 31, 2026 -
High max 7.5openSUSE-SU-2026:21510-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: Changes in perl-Date-Manip: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063) - CVE-2026-60075: CPU exhausti…
first Jul 31, 2026 -
High max 7.5openSUSE-SU-2026:21509-1 1 CVE
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated golang.org/x/text to v0.40.0 to fix CVE-2026-56852 (bsc#1272014)
first Jul 31, 2026 -
Medium max 6.4openSUSE-SU-2026:21507-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
Medium max 5.1openSUSE-SU-2026:21506-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` allows a compromised SPICE host to crash the `spice-vdagent` daemon via a specially crafted message that triggers a heap buffer overflow (bsc#12695…
first Jul 31, 2026