12894 matches found
OPENSUSE-SU-2026:20046-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.6.0 ESR MFSA 2025-96 bsc1254551 CVE-2025-14321 bmo1992760 Use-after-free in the WebRTC: Signaling component CVE-2025-14322 bmo1996473 Sandbox escape due to incorrect boundary...
OPENSUSE-SU-2026:10057-1 chromedriver-144.0.7559.59-1.1 on GA media
These are all security issues fixed in the chromedriver-144.0.7559.59-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20056-1 Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests bsc1254734. - CVE-2025-66577: access and error log...
OPENSUSE-SU-2026:20044-1 Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents bsc1251509. - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption...
OPENSUSE-SU-2026:20043-1 Security update for erlang
This update for erlang fixes the following issues: Update the ssh component to the latest in the maint-27 branch. Security issues fixed: - CVE-2025-48040: ssh: overly tolerant handling of data received from unauthenticated users when processing key exchange messages may lead to excessive resource...
OPENSUSE-SU-2026:20041-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR bsc1256340. - MFSA 2026-03 bsc1256340 CVE-2026-0877: Mitigation bypass in the DOM: Security component CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphic...
OPENSUSE-SU-2026:20039-1 Security update for bind
This update for bind fixes the following issues: - Upgrade to release 9.20.15 Security Fixes: CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs bsc1252379 CVE-2025-40780: Fixed cache poisoning due to weak PRNG bsc1252380 CVE-2025-8677: Fixed resource exhaustion via malformed DNSK...
OPENSUSE-SU-2026:10053-1 ffmpeg-4-4.4.6-11.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.6-11.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10052-1 avahi-0.8-41.1 on GA media
These are all security issues fixed in the avahi-0.8-41.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10051-1 NetworkManager-applet-l2tp-1.52.0-1.1 on GA media
These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10054-1 php-composer2-2.9.3-1.1 on GA media
These are all security issues fixed in the php-composer2-2.9.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10056-1 libwireshark19-4.6.3-1.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10055-1 python311-virtualenv-20.36.1-1.1 on GA media
These are all security issues fixed in the python311-virtualenv-20.36.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20038-1 Security update for wget2
This update for wget2 fixes the following issues: Changes in wget2: - Update to release 2.2.1 Fix file overwrite issue with metalink CVE-2025-69194 bsc1255728 Fix remote buffer overflow in getlocalfilenamereal CVE-2025-69195 bsc1255729 Fix a redirect/mirror regression from 400713ca Use the local...
OPENSUSE-SU-2026:20034-1 Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.111 - Security fixes: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled bsc1252753. - CVE-2025-55754: improper neutralization of Escape, Meta, or Control Sequences vulnerability in Apache...
OPENSUSE-SU-2026:20031-1 Security update for curl
This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS bsc1256105. - CVE-2025-14524: bearer token leak on cross-protocol redirect bsc1255731. - CVE-2025-14819: libssh global knownhost override...
OPENSUSE-SU-2026:20032-1 Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents bsc1250983...
OPENSUSE-SU-2026:20030-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed modmd ACME, unintended retry intervals bsc1254511 - CVE-2025-58098: Fixed Server Side Includes adds query string to exec cmd bsc1254512 - CVE-2025-65082: Fixed CGI environment variable override bsc1254514 - CVE-2025-66200...
OPENSUSE-SU-2026:20029-1 Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption bsc1255715. Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures bsc1256246. - gpg...
OPENSUSE-SU-2026:20027-1 Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate bsc1252281. - CVE-2025-59362: SNMP message processing component of Squid Cache can...
OPENSUSE-SU-2026:10050-1 rke2-1.34-1.34.3+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.34-1.34.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10047-1 libcryptopp-devel-8.9.0-6.1 on GA media
These are all security issues fixed in the libcryptopp-devel-8.9.0-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10048-1 openCryptoki-3.26.0-3.1 on GA media
These are all security issues fixed in the openCryptoki-3.26.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10046-1 MozillaFirefox-147.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-147.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10049-1 python311-urllib3-2.6.3-1.1 on GA media
These are all security issues fixed in the python311-urllib3-2.6.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20026-1 Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries bsc1252399 - CVE-2025-58160: tracing-subscriber: Fixed log pollution bsc1249011...
OPENSUSE-SU-2026:20025-1 Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 bsc1251939. - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json bsc1230275. - Make builds determinitstic bsc1230275. - Bump rails version from 8.0.2 to 8.0.2.1 bsc1248100. - Require openssl explicitly...
OPENSUSE-SU-2026:10045-1 liburiparser1-1.0.0-1.1 on GA media
These are all security issues fixed in the liburiparser1-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10036-1 cockpit-repos-4.6-1.1 on GA media
These are all security issues fixed in the cockpit-repos-4.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10044-1 python311-pypdf-6.6.0-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10040-1 libsoup-3_0-0-3.6.5-11.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.5-11.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10041-1 libsoup-2_4-1-2.74.3-14.1 on GA media
These are all security issues fixed in the libsoup-24-1-2.74.3-14.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10037-1 firefox-esr-140.7.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10043-1 python311-filelock-3.20.3-1.1 on GA media
These are all security issues fixed in the python311-filelock-3.20.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10038-1 fluidsynth-2.5.2-2.1 on GA media
These are all security issues fixed in the fluidsynth-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10039-1 kernel-devel-6.18.5-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.18.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10042-1 mcphost-0.32.0-1.1 on GA media
These are all security issues fixed in the mcphost-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20018-1 Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing malicious files or remote filesystem attribute values can lead to denial-of-service bsc1254878. -...
OPENSUSE-SU-2026:20014-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.6.0 ESR was released: Fixed: Various security fixes. MFSA 2025-94 bsc1254551: CVE-2025-14321: Use-after-free in the WebRTC: Signaling component CVE-2025-14322: Sandbox escape...
OPENSUSE-SU-2026:20017-1 Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...
OPENSUSE-SU-2026:20016-1 Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet bsc1253177...
OPENSUSE-SU-2026:20015-1 Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped reason argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks bsc1254903. - CVE-2025-67725: quadratic complexity of string concatenatio...
OPENSUSE-SU-2026:10027-1 ffmpeg-4-4.4.6-10.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.6-10.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10028-1 ffmpeg-7-7.1.3-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10031-1 kubelogin-0.2.14-1.1 on GA media
These are all security issues fixed in the kubelogin-0.2.14-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10035-1 teleport-17.7.13-1.1 on GA media
These are all security issues fixed in the teleport-17.7.13-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10034-1 python311-Authlib-1.6.6-1.1 on GA media
These are all security issues fixed in the python311-Authlib-1.6.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10029-1 istioctl-1.28.2-1.1 on GA media
These are all security issues fixed in the istioctl-1.28.2-1.1 package on the GA media of openSUSE Tumbleweed...