31288 matches found
Security update for webkit2gtk3 (important)
openSUSE security update: security update for webkit2gtk3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21508-1 Rating: important References: bsc1271638 Cross-References: CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699...
Security update for keybase-client (low)
openSUSE Security Update: Security update for keybase-client Announcement ID: openSUSE-SU-2026:0272-1 Rating: low References: Cross-References: CVE-2026-39824 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...
Security update for warewulf4 (moderate)
openSUSE security update: security update for warewulf4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21509-1 Rating: moderate References: bsc1272014 Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9...
php8-8.5.9-1.1 on GA media (moderate)
php8-8.5.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11418-1 Rating: moderate Cross-References: CVE-2026-17543 CVE-2026-17544 CVE-2026-7260 CVE-2026-9672 CVSS scores: CVE-2026-17543 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-17543 SUSE : 9.3...
openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21480-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21480-1 advisory. - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation bsc1272488. - CVE-2026-39821:...
PackageKit-1.3.6-1.1 on GA media (moderate)
PackageKit-1.3.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11406-1 Rating: moderate Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2026-10294 SUSE : 2.1...
openSUSE 16 Security Update : ignition (openSUSE-SU-2026:21482-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21482-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...
OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media
These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11418-1 php8-8.5.9-1.1 on GA media
These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16 Security Update : yq (openSUSE-SU-2026:21500-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21500-1 advisory. Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good bsc1267199. - update to v4.53.3 Add...
openSUSE 16 Security Update : google-guest-agent (openSUSE-SU-2026:21476-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21476-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...
openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21492-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21492-1 advisory. Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels Tenable has extracted the preceding description block...
warewulf4-4.7.0-4.1 on GA media (moderate)
warewulf4-4.7.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11404-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
libblkid-devel-2.42.2-1.1 on GA media (moderate)
libblkid-devel-2.42.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11408-1 Rating: moderate Cross-References: CVE-2026-13595 CVE-2026-53612 CVE-2026-53613 CVE-2026-53614 CVSS scores: CVE-2026-13595 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H CVE-2026-13595 SUSE : 6.9...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0271-1 Rating: important References: 1272936 Cross-References: CVE-2026-17650 CVE-2026-17651 CVE-2026-17652 CVE-2026-17653 CVE-2026-17654 CVE-2026-17655 CVE-2026-17656 CVE-2026-17657 CVE-2026-17658...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21499-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21499-1 advisory. Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip...
openSUSE 16 Security Update : gh (openSUSE-SU-2026:21494-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21494-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...
dnsdist-2.0.7-1.1 on GA media (moderate)
dnsdist-2.0.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11411-1 Rating: moderate Cross-References: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005 CVSS scores: CVE-2026-40011 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N...
openSUSE 16 Security Update : google-osconfig-agent (openSUSE-SU-2026:21456-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21456-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...