12894 matches found
OPENSUSE-SU-2026:21492-1 Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels...
OPENSUSE-SU-2026:21476-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inp...
OPENSUSE-SU-2026:21470-1 Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...
OPENSUSE-SU-2026:21474-1 Security update for s2n
This update for s2n fixes the following issues: Changes in s2n: - CVE-2026-16318: Denial of Service due to memory leak in QUIC transport parameters handler bsc1272352 - CVE-2026-16317: man-in-the-middle attack can silently discard individual application data records...
OPENSUSE-SU-2026:11358-1 MozillaFirefox-153.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-153.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11367-1 libnutclient2-2.8.5-2.1 on GA media
These are all security issues fixed in the libnutclient2-2.8.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11369-1 opennlp-1.9.5-2.1 on GA media
These are all security issues fixed in the opennlp-1.9.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11356-1 python313-urwid-4.0.5-1.1 on GA media
These are all security issues fixed in the python313-urwid-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11345-1 amazon-ecs-init-1.105.0-2.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.105.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21427-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate bsc1271705...
OPENSUSE-SU-2026:21426-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails bsc1271495. - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files bsc1268878. - CVE-2026-61464: Heap...
OPENSUSE-SU-2026:21418-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
OPENSUSE-SU-2026:11325-1 agama-web-ui-23+0.f26ed5eab-49.1 on GA media
These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21391-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366: ME...
OPENSUSE-SU-2026:11305-1 containerized-data-importer1.65-api-1.65.0-2.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21329-1 Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. - CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve...
OPENSUSE-SU-2026:11262-1 sdbootutil-1+git20260713.d869cf8-1.1 on GA media
These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11259-1 libopenbabel8-3.2.1-1.1 on GA media
These are all security issues fixed in the libopenbabel8-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21313-1 Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response bsc1271029 - CVE-2026-53877: Heap buffer over-read in GDALRaster bsc1271030 - CVE-2026-53878: Header injection possibility since...
OPENSUSE-SU-2026:21294-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length...
OPENSUSE-SU-2026:11248-1 python313-Django-5.2.16-1.1 on GA media
These are all security issues fixed in the python313-Django-5.2.16-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21274-1 Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270174. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac...
OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media
These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21277-1 Security update for go-sendxmpp
This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.16.0: Added: Add Ox support to http-upload. Add Ox support for private group chats. Show error cause if joining MUCs failedi requires go-xmpp = v0.3.5. Changed: Fix --ox-delete-nodes. Fix receiving of 1-...
OPENSUSE-SU-2026:21272-1 Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409. - CVE-2026-8927: env-set cross-proxy Digest auth state leak...
OPENSUSE-SU-2026:11219-1 perl-HTTP-Tiny-0.096-2.1 on GA media
These are all security issues fixed in the perl-HTTP-Tiny-0.096-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11227-1 xwayland-24.1.12-1.1 on GA media
These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11207-1 libsuricata8_0_5-8.0.5-2.1 on GA media
These are all security issues fixed in the libsuricata805-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21236-1 Security update for nodejs24
This update for nodejs24 fixes the following issues Update to version 24.18.0 bsc1269825. Security issues fixed: - CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption bsc1268480. - CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead ...
OPENSUSE-SU-2026:21210-1 Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents bsc1251453. -...
OPENSUSE-SU-2026:21242-1 Security update for assimp
This update for assimp fixes the following issues - CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a heap-based buffer overflow bsc1251019. - CVE-2026-10197: NULL pointer dereference in ImportEmbeddedTextures when mimeType lacks '/' bsc1266996. -...
OPENSUSE-SU-2026:11190-1 python313-dulwich-1.2.7-1.1 on GA media
These are all security issues fixed in the python313-dulwich-1.2.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11195-1 tomcat11-11.0.23-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.23-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21211-1 Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow bsc1262237. Changes for ffmpeg-7: - Update to version 7.1.4: Codec, format, filter and various other bugfixes. lavc/aarch64: Fix addp overflow in...
OPENSUSE-SU-2026:21207-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-46523: heap-use-after-free via a crafted MSL image bsc1268125...
OPENSUSE-SU-2026:21204-1 Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder bsc1268401...
OPENSUSE-SU-2026:11181-1 python314-3.14.6-1.1 on GA media
These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11174-1 gzip-1.14-2.1 on GA media
These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21180-1 Security update for mupdf
This update for mupdf fixes the following issues: Changes in mupdf: - Build and ship MuPDF as a shared library make shared=yes instead of static-only: New subpackage libmupdf272 carries libmupdf.so.27.2 the SONAME tracks the upstream minor.patch version. Replaced the static-only mupdf-devel-stati...
OPENSUSE-SU-2026:11157-1 perl-CSS-Minifier-XS-0.140.0-1.1 on GA media
These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21076-1 Security update for giflib
This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count bsc1259836...
OPENSUSE-SU-2026:21074-1 Security update for loupe
This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation bsc1249009. Changes for loupe: - Update to version 48.2: - Check if the is-hidden property is available before reading it. -...
OPENSUSE-SU-2026:11142-1 libQXmppQt6-10-1.16.1-1.1 on GA media
These are all security issues fixed in the libQXmppQt6-10-1.16.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21072-1 Security update for trivy
This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption bsc1267268. - CVE-2026-46680:...
OPENSUSE-SU-2026:21157-1 Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266615...
OPENSUSE-SU-2026:21143-1 Security update for gleam
This update for gleam fixes the following issues: Changes in gleam: - Update to 1.17.0: Fixed security vulnerabilities: - Restrict custom documentation page path and source values so gleam docs build cannot escape the docs output directory or project root bsc1267396, CVE-2026-32685 - Restrict...
OPENSUSE-SU-2026:21016-1 Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. - CVE-2026-43860: truncation of hashpasswd by one byte for IMAP authcram MD5 digest bsc1263896. - CVE-2026-43861: missing check for \0 in urlpctdecode...