860 matches found
OPENSUSE-SU-2026:11675-1 python313-aiosmtpd-1.4.6-6.1 on GA media
These are all security issues fixed in the python313-aiosmtpd-1.4.6-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11673-1 opencode-1.18.26-1.1 on GA media
These are all security issues fixed in the opencode-1.18.26-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11667-1 hauler-2.1.0-1.1 on GA media
These are all security issues fixed in the hauler-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11670-1 mcphost-0.34.0-10.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11676-1 trivy-0.74.0-2.1 on GA media
These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21733-1 Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes...
OPENSUSE-SU-2026:21731-1 Security update for gegl
This update for gegl fixes the following issues: Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229...
OPENSUSE-SU-2026:21721-1 Security update for c-ares
This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via aresgetaddrinfo over TCP bsc1270416. - CVE-2026-69184: CPU exhaustion denial of service via unbounded DNS name compression...
OPENSUSE-SU-2026:21720-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...
OPENSUSE-SU-2026:21728-1 Security update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb
This update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb fixes the following issues: Changes in orthanc: - Version 1.13.0 Highlights: complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded. The configuration file has been split...
OPENSUSE-SU-2026:21717-1 Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...
OPENSUSE-SU-2026:21724-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.64 boo1276749, stable released 2026-08-25: CVE-2026-79282: Use after free in ANGLE CVE-2026-79290: Use after free in Aura CVE-2026-79054: Use after free in Chromecast CVE-2026-79121: Improper input...
OPENSUSE-SU-2026:21716-1 Security update for wicked2nm
This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - serdewith: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Other updates and bugfixes: Builddeps: bump serdewith from 3.18.0 to 3.21.0. Fix flaky tests. Fix teamlacpethtoo...
OPENSUSE-SU-2026:11659-1 ffmpeg-9-libavcodec-devel-9.0.1-3.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11660-1 glibc-2.44-1.1 on GA media
These are all security issues fixed in the glibc-2.44-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11658-1 exiv2-0.28.9-1.1 on GA media
These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11657-1 dracut-112+suse.47.gec0b378-1.1 on GA media
These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11663-1 perl-URI-5.360.0-1.1 on GA media
These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11656-1 aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11662-1 openai-codex-0.152.0-1.1 on GA media
These are all security issues fixed in the openai-codex-0.152.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11661-1 grafana-12.4.5-5.1 on GA media
These are all security issues fixed in the grafana-12.4.5-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21714-1 Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. - CVE-2026-70907: OpenJDK: Enhance TLS server...
OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...
OPENSUSE-SU-2026:21711-1 Security update for emacs
This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions an...
OPENSUSE-SU-2026:21706-1 Security update for libgpg-error
This update for libgpg-error fixes the following issue: - Out-of-bounds read in gpgrtvfnameconcat of stringutils.c when the GPGRTFCONCATSYSCONF flag is used bsc1263078...
OPENSUSE-SU-2026:11654-1 snphost-0.7.0-3.1 on GA media
These are all security issues fixed in the snphost-0.7.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11649-1 Botan-3.13.0-1.1 on GA media
These are all security issues fixed in the Botan-3.13.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11652-1 java-1_8_0-openjdk-1.8.0.504-1.1 on GA media
These are all security issues fixed in the java-180-openjdk-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11655-1 libtree-sitter0_26-0.26.8-5.1 on GA media
These are all security issues fixed in the libtree-sitter026-0.26.8-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11650-1 gopass-1.17.0-1.1 on GA media
These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11653-1 snpguest-0.10.0-3.1 on GA media
These are all security issues fixed in the snpguest-0.10.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11651-1 incus-7.4-1.1 on GA media
These are all security issues fixed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21701-1 Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...
OPENSUSE-SU-2026:21700-1 Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...
OPENSUSE-SU-2026:21702-1 Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...
OPENSUSE-SU-2026:21699-1 Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...
OPENSUSE-SU-2026:21703-1 Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...
OPENSUSE-SU-2026:21705-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
OPENSUSE-SU-2026:21704-1 Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...
OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...
OPENSUSE-SU-2026:21691-1 Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 3.0.6git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted oversized LDAP UNBIND packet bsc1270695. - CVE-2026-11611: unbounded memory growth allowed by the Content...
OPENSUSE-SU-2026:21689-1 Security update for gstreamer-devtools
This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal Channel type's Drop method has a race condition that can lead to a double-free and memory corruption bsc1243178. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI...
OPENSUSE-SU-2026:21687-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...
OPENSUSE-SU-2026:21681-1 Security update for rav1e
This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and terminal manipulation bsc1249016. Changes for rav1e: - Update cargo dependencies...
OPENSUSE-SU-2026:21685-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...
OPENSUSE-SU-2026:21690-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. - CVE-2026-59893: quadratic complexity when processing...
OPENSUSE-SU-2026:21693-1 Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386...
OPENSUSE-SU-2026:21694-1 Security update for librest
This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...
OPENSUSE-SU-2026:21692-1 Security update for dhcpcd
This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service bsc1268980. - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte stack out-of-bounds write bsc1268976. -...