5,595 results · Clear filters · Feed
-
Critical max 9.1openSUSE-SU-2026:12217-1 15 CVEs
perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media
These are all security issues fixed in the perl-Cpanel-JSON-XS-4.800.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.1openSUSE-SU-2026:12214-1 3 CVEs
kyverno-1.19.2-1.1 on GA media
These are all security issues fixed in the kyverno-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.1openSUSE-SU-2026:12212-1 3 CVEs
go1.26-1.26.10-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: Update to php 8.3.36: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.2
Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
first Oct 21, 2026 -
Critical max 9.6SUSE-SU-2026:4834-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
first Oct 21, 2026 -
Critical max 9.2SUSE-SU-2026:4809-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme …
-
Critical max 9.6SUSE-SU-2026:4806-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
-
Critical max 9.2SUSE-SU-2026:4797-1 14 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). - CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resour…
-
Critical max 9.8SUSE-SU-2026:4793-1 4 CVEs
Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM…
-
Critical max 9.4SUSE-SU-2026:4787-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
-
Critical max 9.8SUSE-SU-2026:4785-1 2 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-202…
-
Critical max 9.1openSUSE-SU-2026:12207-1 5 CVEs
vexctl-0.4.4+git106.aa6ffc8-1.1 on GA media
These are all security issues fixed in the vexctl-0.4.4+git106.aa6ffc8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Critical max 9.1openSUSE-SU-2026:12204-1 1 CVE
python313-joserfc-1.7.7-1.1 on GA media
These are all security issues fixed in the python313-joserfc-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Critical max 9.8openSUSE-SU-2026:12190-1 77 CVEs
MozillaFirefox-158.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-158.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Critical max 9.5SUSE-SU-2026:24250-1 7 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). - CVE-2026-66066: unsafe image processing operations on untrusted uploads can …
first Oct 9, 2026 -
Critical max 9.8SUSE-SU-2026:24235-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:24239-1 13 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization a…
first Oct 13, 2026 -
Critical max 9.8SUSE-SU-2026:24237-1 15 CVEs
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization af…
first Oct 13, 2026 -
Critical max 9.2SUSE-SU-2026:24234-1 5 CVEs
Security update for iperf
This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). - CVE-2026-71218: unbounded peer-controlled allocation…
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:24226-1 9 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 9, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…
first Oct 9, 2026 -
Critical max 9.2SUSE-SU-2026:24224-1 5 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handlin…
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24219-1 10 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
first Oct 9, 2026 -
Critical max 9.8SUSE-SU-2026:24214-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). Changes for ghostscript: - Version upgrade…
first Oct 9, 2026 -
Critical max 9.3SUSE-SU-2026:24208-1 2 CVEs
Security update for python-anyio
This update for python-anyio fixes the following issues: - CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr…
first Oct 8, 2026 -
Critical max 9.8SUSE-SU-2026:24197-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Critical max 9.5SUSE-SU-2026:24195-1 7 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). - CVE-2026-66066: unsafe image processing operations on untrusted uploads can …
first Oct 9, 2026 -
Critical max 9.8SUSE-SU-2026:4776-1 2 CVEs
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-6815…
first Oct 20, 2026 -
Critical max 9.8SUSE-SU-2026:4768-1 4 CVEs
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 20, 2026 -
Critical max 9.8SUSE-SU-2026:4749-1 4 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 20, 2026 -
Critical max 9.1openSUSE-SU-2026:22125-1 17 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: Update to version 12.4.10: * Security: * CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Drop dependency on…
first Oct 19, 2026 -
Critical max 9.1openSUSE-SU-2026:22136-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array (bsc#1285840)
first Oct 19, 2026 -
Critical max 9.1openSUSE-SU-2026:22133-1 3 CVEs
Security update for tinyproxy
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387] - Fixed failure to reject requests containing multiple Content-Length heade…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4748-1 4 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
-
Critical max 9.6openSUSE-SU-2026:12188-1 10 CVEs
chromedriver-155.0.8059.84-1.1 on GA media
These are all security issues fixed in the chromedriver-155.0.8059.84-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4730-1 4 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4718-1 4 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 18, 2026 -
Critical max 9.8SUSE-SU-2026:24184-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4725-1 4 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM…
first Oct 18, 2026