5,592 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:24620-1 16 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…
first Nov 4, 2026 -
Critical max 10.0SUSE-SU-2026:24619-1 1056 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: s…
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:24623-1 12 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64053: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (bsc#1272986). - CVE-2026-64217: netfs:…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24622-1 1 CVE
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24621-1 15 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24624-1 16 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24626-1 15 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24627-1 16 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:24628-1 16 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on sub…
first Nov 4, 2026 -
Critical max 9.8SUSE-SU-2026:5202-1 9 CVEs
Security update for distribution
This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control…
first Nov 11, 2026 -
Critical max 9.2SUSE-SU-2026:5194-1 34 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802). - CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to un…
first Nov 11, 2026 -
Critical max 10.0openSUSE-SU-2026:22249-1 5 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) - CVE-2026-115906: zip: authentication bypass in AES encrypted entries du…
first Nov 6, 2026 -
Critical max 9.8openSUSE-SU-2026:22243-1 1 CVE
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
first Nov 4, 2026 -
Critical max 9.8openSUSE-SU-2026:22246-1 39 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802). - CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to un…
first Nov 5, 2026 -
Critical max 9.6
chromedriver-157.0.8103.50-1.1 on GA media
These are all security issues fixed in the chromedriver-157.0.8103.50-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 10, 2026 -
Critical max 9.1openSUSE-SU-2026:12513-1 36 CVEs
java-1_8_0-openjdk-1.8.0.512-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 10, 2026 -
Critical max 9.1openSUSE-SU-2026:22236-1 8 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed fra…
first Nov 3, 2026 -
Critical max 9.8openSUSE-SU-2026:22235-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
first Nov 2, 2026 -
Critical max 9.1SUSE-SU-2026:5167-1 11 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278574). - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server …
first Nov 10, 2026 -
Critical max 9.6SUSE-SU-2026:5174-1 81 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.7.0 ESR (MFSA 2026-127, bsc#1289275): - CVE-2026-118007: Use-after-free in the JavaScript: GC component. - CVE-2026-118019: Race condition, use-after-fre…
first Nov 10, 2026 -
Critical max 9.1openSUSE-SU-2026:22232-1 5 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). -…
first Oct 27, 2026 -
Critical max 9.6SUSE-SU-2026:3714-1 9 CVEs
Security update for Multi-Linux Manager Monitoring stack
This update fixes the following issues: prometheus-postgres_exporter: - CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 and prevent validation bypass and privilege escalation (bsc#1248699) golang-github-prometheus-alertmanager:…
first Aug 24, 2026 -
Critical max 9.2
Security update for python-Brotli
This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Upda…
first Oct 29, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Nov 1, 2026 -
Critical max 9.4openSUSE-SU-2026:12504-1 1 CVE
python310-3.10.22-3.1 on GA media
These are all security issues fixed in the python310-3.10.22-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.8
rclone-1.76.0-1.1 on GA media
These are all security issues fixed in the rclone-1.76.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.8openSUSE-SU-2026:12503-1 1 CVE
python313-pybars3-0.9.7-3.1 on GA media
These are all security issues fixed in the python313-pybars3-0.9.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5148-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5149-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-3…
first Nov 9, 2026 -
Critical max 9.2SUSE-SU-2026:5137-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).
first Nov 9, 2026 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptograp…
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5150-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 9, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
Critical max 9.1openSUSE-SU-2026:12490-1 1 CVE
perl-Math-Clipper-1.300.0-1.1 on GA media
These are all security issues fixed in the perl-Math-Clipper-1.300.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 10.0openSUSE-SU-2026:12488-1 1 CVE
openai-codex-0.166.0-2.1 on GA media
These are all security issues fixed in the openai-codex-0.166.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 9.8SUSE-SU-2026:24562-1 10 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.8SUSE-SU-2026:24564-1 11 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.1SUSE-SU-2026:24555-1 5 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing…
first Oct 29, 2026 -
Critical max 9.2openSUSE-SU-2026:12477-1 3 CVEs
python316-3.16.0~a1-1.1 on GA media
These are all security issues fixed in the python316-3.16.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026