12909 matches found
OPENSUSE-SU-2026:10556-1 xorg-x11-server-21.1.21-5.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.21-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10554-1 python314-3.14.4-1.1 on GA media
These are all security issues fixed in the python314-3.14.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10550-1 apache-pdfbox-2.0.36-1.1 on GA media
These are all security issues fixed in the apache-pdfbox-2.0.36-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10557-1 xwayland-24.1.9-2.1 on GA media
These are all security issues fixed in the xwayland-24.1.9-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10553-1 python313-3.13.13-1.1 on GA media
These are all security issues fixed in the python313-3.13.13-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20579-1 Security update for gosec
This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.25.0: choredeps: bump google.golang.org/grpc from 1.75.0 to 1.79.3 1617 fix: allow barry action to access secrets on fork PRs 1616 fix: reduce G117 false positives for custom marshalers and transformed value...
OPENSUSE-SU-2026:20581-1 Security update for nebula
This update for nebula fixes the following issues: Changes in nebula: - Update to version 1.10.3: Fix an issue where blocklist bypass is possible when using curve P256 Any newly issued P256 based certificates will have their signature clamped to the low-s form. Nebula will assert the low-s...
OPENSUSE-SU-2026:20537-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...
OPENSUSE-SU-2026:20535-1 Security update for plexus-utils
This update for plexus-utils fixes the following issue: - CVE-2025-67030: directory traversal via the extractFile method of org.codehaus.plexus.util.Expand bsc1260588...
OPENSUSE-SU-2026:20536-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. bsc1258765...
OPENSUSE-SU-2026:20533-1 Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password bsc1232234...
OPENSUSE-SU-2026:20532-1 Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string bsc1258637...
OPENSUSE-SU-2026:20528-1 Security update for Botan
This update for Botan fixes the following issues: - CVE-2026-34582: Fixed a client authentication bypass in TLS 1.3 implementation bsc1261880...
OPENSUSE-SU-2026:10548-1 tomcat10-10.1.54-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.54-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10549-1 tomcat11-11.0.21-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.21-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10547-1 tomcat-9.0.117-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.117-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10545-1 python311-aiohttp-3.13.5-3.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.13.5-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10542-1 goshs-2.0.0-1.1 on GA media
These are all security issues fixed in the goshs-2.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10541-1 flatpak-1.16.6-1.1 on GA media
These are all security issues fixed in the flatpak-1.16.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10546-1 python311-rfc3161-client-1.0.6-1.1 on GA media
These are all security issues fixed in the python311-rfc3161-client-1.0.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10540-1 Botan-3.11.1-1.1 on GA media
These are all security issues fixed in the Botan-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10544-1 log4j-2.20.0-2.1 on GA media
These are all security issues fixed in the log4j-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10543-1 kubo-0.40.1-1.1 on GA media
These are all security issues fixed in the kubo-0.40.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20525-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...
OPENSUSE-SU-2026:20523-1 Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution bsc1261829...
OPENSUSE-SU-2026:20578-1 Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation bsc1261729 - CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin bsc1261731 - CVE-2026-4292: Privilege abuse in ModelAdmin.listeditable...
OPENSUSE-SU-2026:20519-1 Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. - CVE-2026-21716:...
OPENSUSE-SU-2026:20518-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling bsc1259947. - CVE-2025-43214: processing maliciously crafted web...
OPENSUSE-SU-2026:20517-1 Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives bsc1259611. - CVE-2026-2297: incorrectly handled hook in FileLoader can...
OPENSUSE-SU-2026:20576-1 Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens bsc1261355...
OPENSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media
These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10538-1 helm-4.1.4-2.1 on GA media
These are all security issues fixed in the helm-4.1.4-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20575-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 147.0.7727.55 boo1261758: CVE-2026-5858: Heap buffer overflow in WebML CVE-2026-5859: Integer overflow in WebML CVE-2026-5860: Use after free in WebRTC CVE-2026-5861: Use after free in V8 CVE-2026-5862: Inappropriate implementation in ...
OPENSUSE-SU-2026:10536-1 libcap-devel-2.78-1.1 on GA media
These are all security issues fixed in the libcap-devel-2.78-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10537-1 python311-biopython-1.87-1.1 on GA media
These are all security issues fixed in the python311-biopython-1.87-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10533-1 libopenssl-3-devel-3.5.3-4.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.5.3-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10532-1 helm3-3.20.2-1.1 on GA media
These are all security issues fixed in the helm3-3.20.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10530-1 chromedriver-147.0.7727.55-1.1 on GA media
These are all security issues fixed in the chromedriver-147.0.7727.55-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10534-1 libopenvswitch-3_7-0-3.7.1-33.1 on GA media
These are all security issues fixed in the libopenvswitch-37-0-3.7.1-33.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10535-1 python311-cryptography-46.0.7-1.1 on GA media
These are all security issues fixed in the python311-cryptography-46.0.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10531-1 cockpit-360-1.1 on GA media
These are all security issues fixed in the cockpit-360-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20513-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...
OPENSUSE-SU-2026:20512-1 Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in matchref due to missing boundary restoration in SCS bsc1248842...
OPENSUSE-SU-2026:20504-1 Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process bsc1257836. - CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed ...
OPENSUSE-SU-2026:20503-1 Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process bsc1257836. - CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards...
OPENSUSE-SU-2026:20502-1 Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process bsc1257836. - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive...
OPENSUSE-SU-2026:20506-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876 - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiati...
OPENSUSE-SU-2026:20505-1 Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet bsc1261299. - CVE-2026-35092: Denial of Service via integer overflow in join message validation bsc1261300...
OPENSUSE-SU-2026:20501-1 Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response bsc1260078. - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions bsc1260082. Other fixes: - nss: Missing checks in...