12894 matches found
OPENSUSE-SU-2026:21432-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...
OPENSUSE-SU-2026:21431-1 Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...
OPENSUSE-SU-2026:21430-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683...
OPENSUSE-SU-2026:21429-1 Security update for net-tools
This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...
OPENSUSE-SU-2026:11346-1 chromedriver-150.0.7871.181-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.181-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11353-1 python313-astropy-8.0.1-1.1 on GA media
These are all security issues fixed in the python313-astropy-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11352-1 proftpd-1.3.9c-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.9c-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11350-1 perl-HTTP-Date-6.80.0-1.1 on GA media
These are all security issues fixed in the perl-HTTP-Date-6.80.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11347-1 ffmpeg-8-8.1.2-2.1 on GA media
These are all security issues fixed in the ffmpeg-8-8.1.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11357-1 libsrt1_5-1.5.6-1.1 on GA media
These are all security issues fixed in the libsrt15-1.5.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11355-1 python313-pikepdf-10.5.1-2.1 on GA media
These are all security issues fixed in the python313-pikepdf-10.5.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11344-1 GraphicsMagick-1.3.47-5.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11354-1 jupyter-matplotlib-0.11.7-18.1 on GA media
These are all security issues fixed in the jupyter-matplotlib-0.11.7-18.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11356-1 python313-urwid-4.0.5-1.1 on GA media
These are all security issues fixed in the python313-urwid-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11348-1 google-guest-agent-20260529.00-4.1 on GA media
These are all security issues fixed in the google-guest-agent-20260529.00-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11345-1 amazon-ecs-init-1.105.0-2.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.105.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11349-1 google-osconfig-agent-20260708.00-3.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260708.00-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11351-1 perl-XML-Bare-0.53-7.1 on GA media
These are all security issues fixed in the perl-XML-Bare-0.53-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21436-1 Security update for rclone
This update for rclone fixes the following issues: Changes in rclone: - Update to version 1.74.4 boo1267192: Version v1.74.4 gui: update embedded release to 1.1.10 local: stop --links symlinks escaping the destination directory CVE-2026-54572 local: don't restore setuid/setgid/sticky bits from...
OPENSUSE-SU-2026:21435-1 Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded character lookahead bsc1271637...
OPENSUSE-SU-2026:21437-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: - CVE-2026-64194: Fixed a Denial of Service via deep DNS compression pointer chains bsc1272214 - CVE-2026-64193: Fixed a remote execution injection bsc1272212...
OPENSUSE-SU-2026:21428-1 Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...
OPENSUSE-SU-2026:21427-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate bsc1271705...
OPENSUSE-SU-2026:21426-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails bsc1271495. - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files bsc1268878. - CVE-2026-61464: Heap...
OPENSUSE-SU-2026:21425-1 Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...
OPENSUSE-SU-2026:21424-1 Security update for apache-ivy
This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting arbitrary files outside the configured "buildRoot" directory bsc1271727. Changes for apache-ivy: - Upgrade to 2.6.0: + the ivy:retrieve task failed whe...
OPENSUSE-SU-2026:21423-1 Security update for jline3
This update for jline3 fixes the following issues: - CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet NEW-ENVIRON variables bsc1269021. - CVE-2026-56741: unauthenticated remote DoS via Unbounded Telnet NAWS Terminal Geometry bsc1270083. Changes for jline3: - Update to...
OPENSUSE-SU-2026:21422-1 Security update for helm
This update for helm fixes the following issues - Update to version 3.21.3 - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loo...
OPENSUSE-SU-2026:21418-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
OPENSUSE-SU-2026:21417-1 Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTSMAX bsc1255451. Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoipd creates it on start jscPED-14836. - Use...
OPENSUSE-SU-2026:21415-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write bsc1269892...
OPENSUSE-SU-2026:21433-1 Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 bsc1266602...
OPENSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....
OPENSUSE-SU-2026:21411-1 Security update for perl
This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...
OPENSUSE-SU-2026:21410-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. - CVE-2026-58011: invalid GDateTime in gdatetimegetymd could trigger a 2-byte out-of-bounds read bsc1270010. - CVE-2026-58012:...
OPENSUSE-SU-2026:21412-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director bsc1271629. - CVE-2026-15043: DBI:SQL:Nano has incorrect predicate evaluation,...
OPENSUSE-SU-2026:21409-1 Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...
OPENSUSE-SU-2026:21408-1 Security update for joe
This update for joe fixes the following issue - CVE-2026-13412: improper validation in tag-file parser can lead to arbitrary command execution bsc1269379...
OPENSUSE-SU-2026:21406-1 Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl cra...
OPENSUSE-SU-2026:11332-1 grafana-12.4.5-3.1 on GA media
These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11324-1 afterburn-5.10.0.git73.b97f772-2.1 on GA media
These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11340-1 prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media
These are all security issues fixed in the prometheus-haclusterexporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11330-1 gh-2.96.0-2.1 on GA media
These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11337-1 java-26-openjdk-26.0.2.0-1.1 on GA media
These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11335-1 java-11-openjdk-11.0.32.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11329-1 firefox-esr-140.13.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11327-1 apache-sshd-2.19.0-2.1 on GA media
These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11325-1 agama-web-ui-23+0.f26ed5eab-49.1 on GA media
These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed...