12789 matches found
OPENSUSE-SU-2026:11075-1 docker-stable-24.0.9_ce-18.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-18.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11095-1 ofono-2.19-3.1 on GA media
These are all security issues fixed in the ofono-2.19-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11100-1 python312-3.12.13-6.1 on GA media
These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20995-1 Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow bsc1248278. - CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function bsc1260411. Non security issue: - QGIS can't export with GDAL- LERC codec,...
OPENSUSE-SU-2026:20994-1 Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - Update to version 3.21.1: Fixed nil pointer panic that could happen wi...
OPENSUSE-SU-2026:20993-1 Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite bsc1266669...
OPENSUSE-SU-2026:21123-1 Security update for bind
This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. - CVE-2026-3593: Heap use-after-free...
OPENSUSE-SU-2026:21117-1 Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...
OPENSUSE-SU-2026:21118-1 Security update for LibVNCServer
This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write bsc1266459...
OPENSUSE-SU-2026:21125-1 Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit bsc1267857...
OPENSUSE-SU-2026:21119-1 Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via sendfile bsc1266370...
OPENSUSE-SU-2026:21104-1 Security update for postgresql16
This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...
OPENSUSE-SU-2026:11068-1 python311-3.11.15-6.1 on GA media
These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21136-1 Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on escaping in UTF-8 matchers...
OPENSUSE-SU-2026:11059-1 lemon-3.53.2-2.1 on GA media
These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20977-1 Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 bsc1244485: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...
OPENSUSE-SU-2026:11050-1 warewulf4-4.7.0-1.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11041-1 python-WebOb-doc-1.8.10-1.1 on GA media
These are all security issues fixed in the python-WebOb-doc-1.8.10-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20969-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Changes in google-guest-agent: Update to version 20260430.00 Update OWNERS 609 Update THIRDPARTYLICENSES to be package specific location. 608 Update dependencies and go version to 1.26.2 607 bsc1265762, CVE-2026-33814 Bump...
OPENSUSE-SU-2026:11036-1 python311-zeroconf-0.149.16-1.1 on GA media
These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11025-1 python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11022-1 opensc-0.27.1-2.1 on GA media
These are all security issues fixed in the opensc-0.27.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20953-1 Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-4367: out-of-bounds read in xpmNextWord bsc1260928...
OPENSUSE-SU-2026:11002-1 python311-Django-5.2.15-1.1 on GA media
These are all security issues fixed in the python311-Django-5.2.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10991-1 afl-5.00c-1.1 on GA media
These are all security issues fixed in the afl-5.00c-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20940-1 Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266600 - Update to version 11.6.14+security-04: Security: CVE-2026-28374: Fix insecure direct object referenc...
OPENSUSE-SU-2026:20936-1 Security update for perl-CryptX
This update for perl-CryptX fixes the following issues: Changes in perl-CryptX: - updated to 0.89.0 0.089 see /usr/share/doc/packages/perl-CryptX/Changes 0.089 2026-05-10 - new: Crypt::ASN1 - new: Crypt::AuthEnc::SIV - new: Crypt::AuthEnc::XChaCha20Poly1305 - new: Crypt::Cipher::SM4 - new:...
OPENSUSE-SU-2026:10983-1 gdk-pixbuf-loader-libheif-1.23.0-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20909-1 Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service bsc1259385...
OPENSUSE-SU-2026:10960-1 go1.26-1.26.4-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20900-1 Security update for csync2
This update for csync2 fixes the following issues Security issue: - CVE-2026-41051: uses insecure temporary directories when compiled with C99 or later bsc1262472. Non security issue: - Fix packages for Immutable Mode jscPED-14855...
OPENSUSE-SU-2026:10944-1 ansible-13-13.7.0-1.1 on GA media
These are all security issues fixed in the ansible-13-13.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20886-1 Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via recursive element amplification bsc1259690...
OPENSUSE-SU-2026:20893-1 Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 Add more information to proxy-dns removal message Update tail command to use /management/logs endpoint Add cloudflared management token command Fix bugs Update golang.org/x/net to 0.55.0...
OPENSUSE-SU-2026:20885-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
OPENSUSE-SU-2026:20871-1 Security update for python-urllib3_1
This update for python-urllib31 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects bsc1265267...
OPENSUSE-SU-2026:10934-1 libmariadbd-devel-11.8.8-1.1 on GA media
These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20853-1 Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update x/net to v0.55.0 bsc1266602, CVE-2026-39821...
OPENSUSE-SU-2026:20854-1 Security update for rqlite
This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.2.0: Support verifying mTLS peer Common Name Console supports restore from SQLite data Console "count rows" respects current Tables Expand/Collapse state Console supports dropping indexes Further Console...
OPENSUSE-SU-2026:20865-1 Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2026-31812: quinn-proto: denial of service via crafted QUIC initial packet bsc1259624. - CVE-2026-32766: astral-tokio-tar: malformed PAX extensions can lead to archive misinterpretation bsc1259966...
OPENSUSE-SU-2026:20850-1 Security update for evince
This update for evince fixes the following issues: Changes in evince: - Update to version 48.2 bsc1265880 CVE-2026-46529: + shell: Quote strings in arguments used when calling evspawn - Update to version 48.1+6: + build: bump DjVuLibre version required + libview: Fix crash in the accessible code...
OPENSUSE-SU-2026:10910-1 libjxl-devel-0.11.2-2.1 on GA media
These are all security issues fixed in the libjxl-devel-0.11.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10911-1 libsoup-3_0-0-3.6.6-5.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.6-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20846-1 Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-40347: crafted multipart/form-data can cause a denial of service bsc1262403. - CVE-2026-42561: denial of service vulnerability in multipart part header parsing bsc1265250...
OPENSUSE-SU-2026:20833-1 Security update for trivy
This update for trivy fixes the following issues: Changes in trivy: - update x/crypto to 0.52.0 bsc1266075, CVE-2026-39827, CVE-2026-39834,CVE-2026-39828,CVE-2026-39829,CVE-2026-39831, CVE-2026-42508,CVE-2026-39833,CVE-2026-39830,CVE-2026-39832,...
OPENSUSE-SU-2026:10870-1 389-ds-3.1.4+e9d94d45a-1.1 on GA media
These are all security issues fixed in the 389-ds-3.1.4+e9d94d45a-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10868-1 libyang-devel-3.13.6-2.1 on GA media
These are all security issues fixed in the libyang-devel-3.13.6-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20813-1 Security update for xz
This update for xz fixes the following issue - CVE-2026-34743: buffer overflow in lzmaindexappend bsc1261280...
OPENSUSE-SU-2026:20811-1 Security update for bubblewrap
This update for bubblewrap fixes the following issue - CVE-2026-41163: improper process attachment via ptrace can lead to arbitrary privileged operations and local root escalation bsc1263113...