12894 matches found
OPENSUSE-SU-2026:11077-1 ghc-aws-0.25.2-1.1 on GA media
These are all security issues fixed in the ghc-aws-0.25.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11080-1 ghc-crypton-asn1-types-0.4.1-1.1 on GA media
These are all security issues fixed in the ghc-crypton-asn1-types-0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11079-1 ghc-crypton-asn1-parse-0.10.0-1.1 on GA media
These are all security issues fixed in the ghc-crypton-asn1-parse-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11086-1 ghc-xml-conduit-1.10.1.0-2.1 on GA media
These are all security issues fixed in the ghc-xml-conduit-1.10.1.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11089-1 hamlib-4.7.2-1.1 on GA media
These are all security issues fixed in the hamlib-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11075-1 docker-stable-24.0.9_ce-18.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-18.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11091-1 kubevirt1.8-container-disk-1.8.3-1.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20995-1 Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow bsc1248278. - CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function bsc1260411. Non security issue: - QGIS can't export with GDAL- LERC codec,...
OPENSUSE-SU-2026:20994-1 Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - Update to version 3.21.1: Fixed nil pointer panic that could happen wi...
OPENSUSE-SU-2026:21134-1 Security update for glycin-loaders
This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to undefined behavior or potential crash due to out-of-bounds access bsc1248035. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249010...
OPENSUSE-SU-2026:20993-1 Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite bsc1266669...
OPENSUSE-SU-2026:21130-1 Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop bsc1267979...
OPENSUSE-SU-2026:20992-1 Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function analyzestringof progs/infocmp.c bsc1259924...
OPENSUSE-SU-2026:21129-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow bsc1267506. - CVE-2026-28883: processing maliciously...
OPENSUSE-SU-2026:21114-1 Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks bsc1266463...
OPENSUSE-SU-2026:21113-1 Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in lydparsersetdataflags when processing crafted YANG XML documents with specific metadata attributes bsc1266316. - CVE-2026-44673: integer overflow in lybreadstring of src/parserlyb.c leads to heap buffer overflo...
OPENSUSE-SU-2026:21115-1 Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in modproxyajp via ajpmsgcheckheader bsc1264163. -...
OPENSUSE-SU-2026:21116-1 Security update for freerdp
This update for freerdp fixes the following issues Update to version 3.26.0: - CVE-2026-33982: heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpralignedoffsetrecalloc bsc1261222. - CVE-2026-33985: FreeRDP: Information disclosure via heap memory out of bounds read...
OPENSUSE-SU-2026:21123-1 Security update for bind
This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. - CVE-2026-3593: Heap use-after-free...
OPENSUSE-SU-2026:21121-1 Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....
OPENSUSE-SU-2026:21122-1 Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....
OPENSUSE-SU-2026:21117-1 Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...
OPENSUSE-SU-2026:21120-1 Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files bsc1267109. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
OPENSUSE-SU-2026:21127-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
OPENSUSE-SU-2026:21124-1 Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions bsc1267733...
OPENSUSE-SU-2026:21118-1 Security update for LibVNCServer
This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write bsc1266459...
OPENSUSE-SU-2026:21119-1 Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via sendfile bsc1266370...
OPENSUSE-SU-2026:21125-1 Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit bsc1267857...
OPENSUSE-SU-2026:21126-1 Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...
OPENSUSE-SU-2026:11071-1 chromedriver-149.0.7827.155-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21111-1 Security update for himmelblau
This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant DAG flow bsc1266662. Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: Update cargo vet audits for backport depsrust: bump the...
OPENSUSE-SU-2026:21109-1 Security update for dovecot24
This update for dovecot24 fixes the following issues - CVE-2026-27851: lib-var-expand: safe filter leaks to all following pipelines bsc1265146. - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection bsc1265147. - CVE-2026-40016: Sieve: contains/: matches ONxM substring...
OPENSUSE-SU-2026:21104-1 Security update for postgresql16
This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...
OPENSUSE-SU-2026:21103-1 Security update for postgresql15
This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...
OPENSUSE-SU-2026:21106-1 Security update for papers
This update for papers fixes the following issues Security issue: - CVE-2026-46529: command injection bsc1265880. Changes for papers: - Update to version 48.10 bsc1265880: - Update to version 48.9 jscPED-15957, bsc1261947: - Bug fixes: - Saved image files are empty - Print dialog says "Manage...
OPENSUSE-SU-2026:21108-1 Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265751...
OPENSUSE-SU-2026:21112-1 Security update for xwayland
This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. bsc1266301 - Font Alias Stack-based Buffer Overflow. bsc1266294 - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. bsc1266300 - XKB Key Types Stack-based Buffer Overflow. bsc12662...
OPENSUSE-SU-2026:21107-1 Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the ngxhttprewritemodule when using a configuration with overlapping captures bsc1266215...
OPENSUSE-SU-2026:21102-1 Security update for postgresql14
This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...
OPENSUSE-SU-2026:21101-1 Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write bsc1264984...
OPENSUSE-SU-2026:21100-1 Security update for libjxl
This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks bsc1266460...
OPENSUSE-SU-2026:21142-1 Security update for perl-Compress-Raw-Zlib
This update for perl-Compress-Raw-Zlib fixes the following issues: Changes in perl-Compress-Raw-Zlib: - updated to 2.222 see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes 2.222 27 February 2026 Add SECURITY.md. Fixes 40 Fix spelling typos 2.221 27 February 2026 Merge remote-tracking bran...
OPENSUSE-SU-2026:21140-1 Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues: Changes in perl-Cpanel-JSON-XS: - updated to 4.420.0 4.42 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.42 2026-06-27 rurban - Ensure encode with a type spec hashref does not change the hashref argument GH 240 - Fix -e...
OPENSUSE-SU-2026:21098-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service bsc1261320. - CVE-2026-34513: unbounded DNS cache can cause a denial of service bsc1261321. - CVE-2026-34514: contenttype parameter manipulation can lead ...
OPENSUSE-SU-2026:21096-1 Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available jscPED-13680, jscPED-15607 On a transactional system where the root filesystem is mounted read-only, zyppe...
OPENSUSE-SU-2026:21097-1 Security update for ansible-core
This update for ansible-core fixes the following issue - CVE-2026-11332: argument injection in ansible-galaxy role install leads to arbitrary code execution bsc1267822...
OPENSUSE-SU-2026:21095-1 Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: PyJWKClient passes URI arguments directly to urllib.request.urlopen and allows for SSRF and token forgery bsc1266798. - CVE-2026-48523: verifier-side algorithm allow-list bypass when jwt.decode or jwt.decodecomplete are...
OPENSUSE-SU-2026:11068-1 python311-3.11.15-6.1 on GA media
These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed...