5,532 results · Clear filters · Feed
-
Critical max 9.1openSUSE-SU-2026:22232-1 5 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). -…
first Oct 27, 2026 -
Critical max 9.6SUSE-SU-2026:3714-1 9 CVEs
Security update for Multi-Linux Manager Monitoring stack
This update fixes the following issues: prometheus-postgres_exporter: - CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 and prevent validation bypass and privilege escalation (bsc#1248699) golang-github-prometheus-alertmanager:…
first Aug 24, 2026 -
Critical max 9.2
Security update for python-Brotli
This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Upda…
first Oct 29, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Nov 1, 2026 -
Critical max 9.4openSUSE-SU-2026:12504-1 1 CVE
python310-3.10.22-3.1 on GA media
These are all security issues fixed in the python310-3.10.22-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.8
rclone-1.76.0-1.1 on GA media
These are all security issues fixed in the rclone-1.76.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.8openSUSE-SU-2026:12503-1 1 CVE
python313-pybars3-0.9.7-3.1 on GA media
These are all security issues fixed in the python313-pybars3-0.9.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5148-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5149-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-3…
first Nov 9, 2026 -
Critical max 9.2SUSE-SU-2026:5137-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).
first Nov 9, 2026 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptograp…
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5150-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 9, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
Critical max 9.1openSUSE-SU-2026:12490-1 1 CVE
perl-Math-Clipper-1.300.0-1.1 on GA media
These are all security issues fixed in the perl-Math-Clipper-1.300.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 10.0openSUSE-SU-2026:12488-1 1 CVE
openai-codex-0.166.0-2.1 on GA media
These are all security issues fixed in the openai-codex-0.166.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 9.8SUSE-SU-2026:24562-1 10 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.8SUSE-SU-2026:24564-1 11 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.1SUSE-SU-2026:24555-1 5 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing…
first Oct 29, 2026 -
Critical max 9.2openSUSE-SU-2026:12477-1 3 CVEs
python316-3.16.0~a1-1.1 on GA media
These are all security issues fixed in the python316-3.16.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 9.1openSUSE-SU-2026:12468-1 7 CVEs
perl-Net-IDN-Encode-2.600.0-1.1 on GA media
These are all security issues fixed in the perl-Net-IDN-Encode-2.600.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 9.8openSUSE-SU-2026:12466-1 1 CVE
perl-Email-Sender-2.603.0-1.1 on GA media
These are all security issues fixed in the perl-Email-Sender-2.603.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 9.1openSUSE-SU-2026:12446-1 7 CVEs
alloy-1.21.3-1.1 on GA media
These are all security issues fixed in the alloy-1.21.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 9.8openSUSE-SU-2026:12447-1 45 CVEs
ansible-14-14.6.0-1.1 on GA media
These are all security issues fixed in the ansible-14-14.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 10.0openSUSE-SU-2026:12454-1 3 CVEs
gleam-1.19.2-1.1 on GA media
These are all security issues fixed in the gleam-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Critical max 9.8SUSE-SU-2026:24594-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24595-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.1SUSE-SU-2026:24604-1 8 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed fra…
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:24578-1 12 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24581-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_option_arr…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24582-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in netfs_extr…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24584-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24583-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24585-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24586-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24588-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24587-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24593-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24589-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24592-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026