12909 matches found
OPENSUSE-SU-2026:21741-1 Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged bsc1249011...
OPENSUSE-SU-2026:21736-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
OPENSUSE-SU-2026:11670-1 mcphost-0.34.0-10.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21720-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...
OPENSUSE-SU-2026:21705-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
OPENSUSE-SU-2026:21704-1 Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...
OPENSUSE-SU-2026:11627-1 bzip2-1.0.8-6.1 on GA media
These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21669-1 Security update for wicked
This update for wicked fixes the following issues: Changes in wicked: - Fix two OOB reads in nicaptureinspectudpheader and improve: - Reject packets with iplen ihl to avoid a sizet underflow of the UDP length, which the checksum truncates to uint16t bsc1274627, CVE-2026-71401. - Set payloadlen to...
OPENSUSE-SU-2026:21650-1 Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...
OPENSUSE-SU-2026:11581-1 chromedriver-151.0.7922.173-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.173-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21621-1 Security update for git-lfs
This update for git-lfs fixes the following issues: Changes in git-lfs: - update to 3.7.1: boo1252259 CVE-2025-26625 This release introduces security fixes for Linux, macOS, and Windows systems, which have been collectively assigned CVE-2025-26625. When populating a Git repository's working tree...
OPENSUSE-SU-2026:11562-1 comfyui-0.33.3-1.1 on GA media
These are all security issues fixed in the comfyui-0.33.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21602-1 Security update for python-pytest-html
This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor browserslist to fix the following: CVE-2026-73088: unguarded for...in loop over untrusted JSON keys in normalizeStats function leads to prototype pollution and uncaught exceptions bsc1275374...
OPENSUSE-SU-2026:11538-1 python313-datamodel-code-generator-0.72.3-1.1 on GA media
These are all security issues fixed in the python313-datamodel-code-generator-0.72.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11497-1 openvpn-2.7.5-1.1 on GA media
These are all security issues fixed in the openvpn-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11469-1 python313-nltk-3.10.1-1.1 on GA media
These are all security issues fixed in the python313-nltk-3.10.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21535-1 Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...
OPENSUSE-SU-2026:11458-1 jupyter-nbdime-7.0.4-24.1 on GA media
These are all security issues fixed in the jupyter-nbdime-7.0.4-24.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11435-1 gd-2.3.3-5.1 on GA media
These are all security issues fixed in the gd-2.3.3-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21487-1 Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...
OPENSUSE-SU-2026:21482-1 Security update for ignition
This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing inval...
OPENSUSE-SU-2026:21479-1 Security update for libpng16
This update for libpng16 fixes the following issues: Changes in libpng16: Version update to 1.6.58 jscPED-16190 see CHANGES for other upstream changes...
OPENSUSE-SU-2026:21467-1 Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...
OPENSUSE-SU-2026:11399-1 tomcat-9.0.120-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.120-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21368-1 Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - Update to 3.8.7 bugfix release - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack bsc1271617 - CVE-2026-47083: ESEARCH cross-user content oracle bsc1271619 - CVE-2026-47082: Vacation "fcc"...
OPENSUSE-SU-2026:21362-1 Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the ttvarloaditemvariationstore function bsc1259118. - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in the TTGetVarDesign implementation used by...
OPENSUSE-SU-2026:21293-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...
OPENSUSE-SU-2026:11222-1 keylime-ima-policy-0.2.9+49-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.9+49-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21245-1 Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgiconn structure's drl field that allows buffer misparse as new FCGI record headers bsc1268557. - CVE-2026-55204: null pointer dereference...
OPENSUSE-SU-2026:21266-1 Security update for openQA, os-autoinst
This update for openQA, os-autoinst fixes the following issues: Changes in openQA: - Update to version 5.1783076943.6691832d: test: Stabilize t/05-scheduler-full.t - Clarify resolution of three CVEs The following CVEs have been fixed see previous changelog entries that mentioned only the accordin...
OPENSUSE-SU-2026:11187-1 helm3-3.21.2-2.1 on GA media
These are all security issues fixed in the helm3-3.21.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11129-1 assimp-devel-6.0.5-4.1 on GA media
These are all security issues fixed in the assimp-devel-6.0.5-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21067-1 Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient bsc1268395. - CVE-2026-49854: out-of-bounds memory access via C extension bsc1268396. - CVE-2026-49855: AsyncHTTPClient accumulates...
OPENSUSE-SU-2026:11116-1 dnsmasq-2.93-1.1 on GA media
These are all security issues fixed in the dnsmasq-2.93-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21025-1 Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass bsc1264265. Changes for keylime: - Update to version 7.14.2...
OPENSUSE-SU-2026:21127-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
OPENSUSE-SU-2026:21124-1 Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions bsc1267733...
OPENSUSE-SU-2026:11051-1 weblate-5.17.1-2.1 on GA media
These are all security issues fixed in the weblate-5.17.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20943-1 Security update for java-17-openj9
This update for java-17-openj9 fixes the following issues: Changes in java-17-openj9: - Make post scripts less noisy bsc1267355 - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 17.0.19 with OpenJ9 0.59.0 virtual machine ...
OPENSUSE-SU-2026:20942-1 Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update apptainer to version v1.5.1 Security fix bsc1267982: Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path matching for limit container paths directive. This is only applicable to SUID installations that...
OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20925-1 Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859...
OPENSUSE-SU-2026:20918-1 Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service bsc1259554 Other changes in salt: - Use non vendored tornado with Python 3.11 bsc1257583, bsc1259700 - Harden Tornado fro...
OPENSUSE-SU-2026:20916-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 149 149.0.7827.53 stable boo1267706: CVE-2026-10881: Out of bounds read and write in ANGLE CVE-2026-10882: Use after free in Network CVE-2026-10883: Out of bounds write in ANGLE CVE-2026-10884: Use after free in...
OPENSUSE-SU-2026:20905-1 Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations bsc1261188. - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3012: group policy certificate enrollment uses http: // without...
OPENSUSE-SU-2026:10961-1 ggml-devel-9500-1.1 on GA media
These are all security issues fixed in the ggml-devel-9500-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10952-1 sshfs-3.7.6-1.1 on GA media
These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed...