5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:23790-1 5 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
first Sep 16, 2026 -
Critical max 10.0SUSE-SU-2026:23784-1 24 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001): * CVE-2026-75874 (bmo#2039972) Sandbox escape in the Remote Settings Client component * CVE-2026-84118 (bmo#2057457) Use-after-…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23781-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23780-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23779-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23778-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23776-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23775-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23772-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23770-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23774-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23773-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23771-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23763-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23762-1 4 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23761-1 4 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.1SUSE-SU-2026:23745-1 4 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.o…
first Sep 17, 2026 -
Critical max 9.1SUSE-SU-2026:23743-1 24 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-0864: improper handling of line-ending characters can lead to configuration…
first Sep 16, 2026 -
Critical max 9.8SUSE-SU-2026:23746-1 6 CVEs
Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722). - C…
first Sep 17, 2026 -
Critical max 9.6openSUSE-SU-2026:11888-1 108 CVEs
chromedriver-154.0.8037.57-1.1 on GA media
These are all security issues fixed in the chromedriver-154.0.8037.57-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 26, 2026 -
Critical max 9.6openSUSE-SU-2026:21951-1 63 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESR (MFSA 2026-93, bsc#1280371): - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…
first Sep 24, 2026 -
Critical max 9.8openSUSE-SU-2026:21950-1 6 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denia…
first Sep 24, 2026 -
Critical max 9.8openSUSE-SU-2026:21946-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).
first Sep 24, 2026 -
Critical max 9.1openSUSE-SU-2026:21944-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
first Sep 23, 2026 -
Critical max 10.0openSUSE-SU-2026:21924-1 17 CVEs
Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 * Update vendor (boo#1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855) * Propagate edge registration errors over QUIC and fix supervisor error …
first Sep 21, 2026 -
Critical max 10.0openSUSE-SU-2026:21910-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Critical max 9.6openSUSE-SU-2026:21899-1 7 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs (bsc#1265542). - CVE-2026-33814: golang.org/x/net/http2: infinite…
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:21898-1 6 CVEs
Security update for distribution
This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control…
first Sep 21, 2026 -
Critical max 10.0
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:21889-1 8 CVEs
Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items (bsc#1279443). - CVE-2026-84384: brotli/zlib decompression paths lack output-size lim…
first Sep 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21883-1 6 CVEs
Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722). - C…
first Sep 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21877-1 26 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2023-6602: HLS Force TTY Demuxer (bsc#1220546). - CVE-2023-6604: HLS XBIN Demuxer DoS Amplification (bsc#1220549). - CVE-2024-35367: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_a…
first Sep 18, 2026 -
Critical max 9.8openSUSE-SU-2026:21874-1 26 CVEs
Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in `Repo.clone_from()` URL via os.path.expandvars() (bsc#1273357). - CVE-2026-67323: unguarded Git options passed as keyword arguments in `Repo.ar…
first Sep 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11882-1 30 CVEs
netty-4.1.138-1.1 on GA media
These are all security issues fixed in the netty-4.1.138-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Critical max 9.8openSUSE-SU-2026:11880-1 904 CVEs
kernel-devel-7.2.7-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2026 -
Critical max 9.8SUSE-SU-2026:4347-1 84 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). - CVE-2026-23451: bonding: …
first Sep 24, 2026 -
Critical max 9.8SUSE-SU-2026:4346-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).
first Sep 24, 2026 -
Critical max 9.3SUSE-SU-2026:4335-1 10 CVEs
Security update for hplip
This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain c…
-
Critical max 9.1openSUSE-SU-2026:11869-1 37 CVEs
rsync-3.5.1-1.1 on GA media
These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
Critical max 9.8openSUSE-SU-2026:11865-1 5 CVEs
python313-sglang-0.5.20-1.1 on GA media
These are all security issues fixed in the python313-sglang-0.5.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026