5,613 results · Clear filters · Feed
-
Critical max 9.2openSUSE-SU-2026:12121-1 3 CVEs
python311-3.11.17-1.1 on GA media
These are all security issues fixed in the python311-3.11.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.6openSUSE-SU-2026:12116-1 61 CVEs
firefox-esr-153.5.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 10.0SUSE-SU-2026:4640-1 508 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38704: rcu/nocb: Fi…
first Oct 13, 2026 -
Critical max 9.8SUSE-SU-2026:4639-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst…
first Oct 13, 2026 -
Critical max 9.1SUSE-SU-2026:24128-1 9 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24126-1 10 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
first Oct 9, 2026 -
Critical max 9.3SUSE-SU-2026:24122-1 2 CVEs
Security update for python-anyio
This update for python-anyio fixes the following issues: - CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr…
first Oct 8, 2026 -
Critical max 9.8SUSE-SU-2026:4632-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620).
first Oct 12, 2026 -
Critical max 9.2SUSE-SU-2026:4630-1 8 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zsta…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4629-1 13 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization a…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4627-1 129 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929): - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege …
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4625-1 15 CVEs
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization af…
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4624-1 10 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 12, 2026 -
Critical max 9.2SUSE-SU-2026:4621-1 5 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handlin…
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4620-1 10 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 12, 2026 -
Critical max 9.8openSUSE-SU-2026:12112-1 16 CVEs
rclone-1.75.2-1.1 on GA media
These are all security issues fixed in the rclone-1.75.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2026 -
Critical max 9.1SUSE-SU-2026:4622-1 8 CVEs
Security update for apache-sshd
This update for apache-sshd fixes the following issues: - CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357). - CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352). - CVE-2026-93995: Remote executi…
first Oct 12, 2026 -
Critical max 9.8openSUSE-SU-2026:12101-1 15 CVEs
go1.27-1.27.2-1.1 on GA media
These are all security issues fixed in the go1.27-1.27.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
Critical max 9.8openSUSE-SU-2026:12098-1 138 CVEs
MozillaThunderbird-153.4.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
Critical max 9.8openSUSE-SU-2026:12097-1 77 CVEs
MozillaFirefox-157.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 10, 2026 -
Critical max 9.8openSUSE-SU-2026:12093-1 13 CVEs
go1.26-1.26.9-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2026 -
Critical max 9.6openSUSE-SU-2026:12091-1 246 CVEs
chromedriver-155.0.8059.39-1.1 on GA media
These are all security issues fixed in the chromedriver-155.0.8059.39-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2026 -
Critical max 9.2openSUSE-SU-2026:12090-1 14 CVEs
bouncycastle-1.86-1.1 on GA media
These are all security issues fixed in the bouncycastle-1.86-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2026 -
Critical max 10.0SUSE-SU-2026:24108-1 20 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24107-1 20 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24106-1 20 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24105-1 20 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24104-1 20 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24103-1 20 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24102-1 20 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24101-1 20 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24100-1 19 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24099-1 20 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24098-1 19 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24097-1 20 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24095-1 20 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24094-1 11 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - C…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24093-1 20 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24092-1 20 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:24090-1 19 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026