5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:23916-1 6 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denia…
first Sep 24, 2026 -
Critical max 9.8SUSE-SU-2026:23913-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).
first Sep 24, 2026 -
Critical max 9.1SUSE-SU-2026:23910-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
first Sep 23, 2026 -
Critical max 10.0SUSE-SU-2026:23902-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Critical max 10.0SUSE-SU-2026:23897-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Critical max 10.0SUSE-SU-2026:23887-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Critical max 10.0SUSE-SU-2026:23881-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Critical max 9.1SUSE-SU-2026:4391-1 30 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler (bsc#1275501). - CVE-2026-59903: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header O…
first Sep 29, 2026 -
Critical max 9.1openSUSE-SU-2026:11898-1 3 CVEs
libtcnative-1-0-1.3.9-1.1 on GA media
These are all security issues fixed in the libtcnative-1-0-1.3.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11893-1 302 CVEs
kernel-devel-7.2.8-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4383-1 4 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:23747-1 5 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23711-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23710-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23691-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23685-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23683-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23682-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23680-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23679-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23678-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23676-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23674-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
first Sep 12, 2026 -
Critical max 10.0SUSE-SU-2026:23625-1 181 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260827T195228 2026-08-27T19:52:28Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5026 CVE-2026-39821 * GO-2026-6225 * GO-2026-6…
first Sep 4, 2026 -
Critical max 9.8SUSE-SU-2026:23609-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…
first Sep 2, 2026 -
Critical max 9.1SUSE-SU-2026:23595-1 24 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: `submission-login`: panic when `mail_max_userip_connections` is reached (bsc#1276794). - CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799). - CVE-2026-336…
first Sep 1, 2026 -
Critical max 10.0SUSE-SU-2026:23590-1 115 CVEs
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. * Fixed: Various security fixes. MFSA 2026-77 (bsc#1274867): * CVE-2026-74934 Site is…
first Aug 31, 2026 -
Critical max 9.8openSUSE-SU-2026:11908-1 12 CVEs
tomcat11-11.0.26-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11907-1 12 CVEs
tomcat10-10.1.60-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.60-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11906-1 12 CVEs
tomcat-9.0.122-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.122-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11899-1 3 CVEs
libtcnative-2-0-2.0.16-1.1 on GA media
These are all security issues fixed in the libtcnative-2-0-2.0.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4386-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).
-
Critical max 9.8SUSE-SU-2026:23720-1 12 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-authori…
first Sep 9, 2026 -
Critical max 9.6SUSE-SU-2026:23712-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23700-1 12 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-authori…
first Sep 9, 2026 -
Critical max 9.6SUSE-SU-2026:23692-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23690-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23688-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23687-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 13, 2026 -
Critical max 9.8SUSE-SU-2026:23686-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026