12894 matches found
OPENSUSE-SU-2026:11107-1 containerd-1.7.33-1.1 on GA media
These are all security issues fixed in the containerd-1.7.33-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21036-1 Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Non security issue: - Update to version 3.0.5 jscSLE-23879...
OPENSUSE-SU-2026:21032-1 Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations bsc1260903...
OPENSUSE-SU-2026:21016-1 Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. - CVE-2026-43860: truncation of hashpasswd by one byte for IMAP authcram MD5 digest bsc1263896. - CVE-2026-43861: missing check for \0 in urlpctdecode...
OPENSUSE-SU-2026:21014-1 Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in transportflagsfromdomain can crash the avahi-daemon bsc1261546. - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the avahi-daemon bsc1257235...
OPENSUSE-SU-2026:21011-1 Security update for 389-ds
This update for 389-ds fixes the following issue - CVE-2026-9064: unbounded LDAP controls count in getldapmessagecontrolsext can lead to amplified CPU time and heap allocation and a denial of service bsc1265898. Changes for 389-ds: - Update to version 3.0.6git337.647f49042: Issue 7541 -...
OPENSUSE-SU-2026:21020-1 Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...
OPENSUSE-SU-2026:21012-1 Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle bsc1268236...
OPENSUSE-SU-2026:21025-1 Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass bsc1264265. Changes for keylime: - Update to version 7.14.2...
OPENSUSE-SU-2026:21017-1 Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit bsc1263898...
OPENSUSE-SU-2026:21028-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
OPENSUSE-SU-2026:21019-1 Security update for rpcbind
This update for rpcbind fixes the following issues - Update to rpcbind 1.2.9 bsc1267212 https://lore.kernel.org/linux-nfs/[email protected]/ rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist rpcbind: Stop unauthenticated oversized allocation in PMAPPROCCALLIT...
OPENSUSE-SU-2026:21029-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer bsc1267957. - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow bsc1267849...
OPENSUSE-SU-2026:21010-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265764. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for...
OPENSUSE-SU-2026:21021-1 Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism bsc1263366. - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read bsc1263367...
OPENSUSE-SU-2026:21024-1 Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file bsc1262144...
OPENSUSE-SU-2026:21023-1 Security update for libexif
This update for libexif fixes the following issues - CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding bsc1259755. - CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling bsc1262000. - CVE-2026-40386: denial of service and...
OPENSUSE-SU-2026:21013-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues Update to version 1.103.2: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265843. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
OPENSUSE-SU-2026:21015-1 Security update for dnsdist
This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content bsc1261236. - CVE-2026-0397: CORS misconfiguration can lead to information disclosure bsc1261237. - CVE-2026-24028: crafted DNS response packet can lead to an out-of-bounds rea...
OPENSUSE-SU-2026:21144-1 Security update for mbedtls
This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to 3.6.6 LTS maintenance update from 3.6.1; security fixes accumulated across the 3.6.2-3.6.6 releases: CVE-2024-49195 boo1231708: buffer underrun in pkwrite when writing an opaque key pair CVE-2025-27809 boo1240051:...
OPENSUSE-SU-2026:21145-1 Security update for mbedtls-2
This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - Enable SRTP and DTLS protocols needed by some software. - Update to version 2.28.10: Default behavior changes In TLS clients, if mbedtlssslsethostname has not been called, mbedtlssslhandshake now fails with...
OPENSUSE-SU-2026:21146-1 Security update for lldpd
This update for lldpd fixes the following issues: Changes in lldpd: - Update to version 1.0.22 Fix CVE-2026-46433, out-of-bound read access when removing VLAN tag 787. Reject 0-length management address in LLDP. Fix race condition when creating the control socket. Fix FDP MAC address. Fix memory...
OPENSUSE-SU-2026:21005-1 Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion bsc1266340. - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based...
OPENSUSE-SU-2026:21004-1 Security update for gsasl
This update for gsasl fixes the following issues: Changes in gsasl: - CVE-2026-48829: DIGEST-MD5: Fix NULL pointer dereference in parser bsc1266371...
OPENSUSE-SU-2026:20998-1 Security update for tree-sitter-ruby
This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js bsc1244345. - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass bsc1250517. Changes for tree-sitter-ruby: - Use correc...
OPENSUSE-SU-2026:11099-1 python311-python-multipart-0.0.32-1.1 on GA media
These are all security issues fixed in the python311-python-multipart-0.0.32-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11093-1 lrzip-0.660-1.1 on GA media
These are all security issues fixed in the lrzip-0.660-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11088-1 gstreamer-plugins-bad-1.28.4+24-1.1 on GA media
These are all security issues fixed in the gstreamer-plugins-bad-1.28.4+24-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11074-1 containerized-data-importer1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11100-1 python312-3.12.13-6.1 on GA media
These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11101-1 python315-3.15.0~b2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0b2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11073-1 bitcoin-qt6-31.0-2.1 on GA media
These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11091-1 kubevirt1.8-container-disk-1.8.3-1.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11090-1 haproxy-3.4.0+git31.fc300e9f2-1.1 on GA media
These are all security issues fixed in the haproxy-3.4.0+git31.fc300e9f2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11092-1 libtar-1.2.20-3.1 on GA media
These are all security issues fixed in the libtar-1.2.20-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11097-1 python311-aiohttp-3.14.1-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.14.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11082-1 ghc-crypton-x509-1.9.1-1.1 on GA media
These are all security issues fixed in the ghc-crypton-x509-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11095-1 ofono-2.19-3.1 on GA media
These are all security issues fixed in the ofono-2.19-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11076-1 dracut-110+suse.35.g9834432-1.1 on GA media
These are all security issues fixed in the dracut-110+suse.35.g9834432-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11078-1 ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media
These are all security issues fixed in the ghc-crypton-asn1-encoding-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11085-1 ghc-crypton-x509-validation-1.9.1-1.1 on GA media
These are all security issues fixed in the ghc-crypton-x509-validation-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11103-1 libxar-devel-1.8.0.0.503-1.1 on GA media
These are all security issues fixed in the libxar-devel-1.8.0.0.503-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11089-1 hamlib-4.7.2-1.1 on GA media
These are all security issues fixed in the hamlib-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11081-1 ghc-crypton-pem-0.3.0-1.1 on GA media
These are all security issues fixed in the ghc-crypton-pem-0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11072-1 MozillaThunderbird-140.12.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11087-1 git-annex-10.20260601-2.1 on GA media
These are all security issues fixed in the git-annex-10.20260601-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11094-1 libnilfs3-2.3.1-1.1 on GA media
These are all security issues fixed in the libnilfs3-2.3.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11083-1 ghc-crypton-x509-store-1.9.0-1.1 on GA media
These are all security issues fixed in the ghc-crypton-x509-store-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...