5,613 results · Clear filters · Feed
-
Critical max 9.3openSUSE-SU-2026:11858-1 10 CVEs
hplip-3.26.6-1.1 on GA media
These are all security issues fixed in the hplip-3.26.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2026 -
Critical max 9.8SUSE-SU-2026:4315-1 5 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…
first Sep 23, 2026 -
Critical max 9.8SUSE-SU-2026:4310-1 3 CVEs
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove m…
first Sep 23, 2026 -
Critical max 9.8SUSE-SU-2026:4302-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).
-
Critical max 9.8SUSE-SU-2026:4279-1 101 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784). - CVE-2024-57841: ne…
first Sep 22, 2026 -
Critical max 9.8SUSE-SU-2026:4284-1 101 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784). - CVE-2024-57841: net: …
first Sep 22, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-68214: timers: Fix NULL function pointer…
first Sep 22, 2026 -
Critical max 9.8SUSE-SU-2026:4280-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).
first Sep 22, 2026 -
Critical max 9.8SUSE-SU-2026:4277-1 7 CVEs
Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client (bsc#1267605). - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-202…
first Sep 22, 2026 -
Critical max 9.8openSUSE-SU-2026:11842-1 1 CVE
rke2-1.36-1.36.4+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.36-1.36.4+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:11828-1 3 CVEs
amazon-cloudwatch-agent-1.300072.0-1.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300072.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:11827-1 31 CVEs
MozillaThunderbird-140.16.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:11826-1 73 CVEs
MozillaFirefox-156.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-156.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 21, 2026 -
Critical max 9.8SUSE-SU-2026:4276-1 8 CVEs
Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items (bsc#1279443). - CVE-2026-84384: brotli/zlib decompression paths lack output-size lim…
first Sep 21, 2026 -
Critical max 9.1SUSE-SU-2026:4272-1 8 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on tru…
-
Critical max 9.1SUSE-SU-2026:4270-1 8 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-56852: golang.org/x/text/unicode/norm: infini…
-
Critical max 9.6openSUSE-SU-2026:11822-1 2 CVEs
kyverno-1.19.1-1.1 on GA media
These are all security issues fixed in the kyverno-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 19, 2026 -
Critical max 9.1openSUSE-SU-2026:11813-1 5 CVEs
cloudflared-2026.9.1-1.1 on GA media
These are all security issues fixed in the cloudflared-2026.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11812-1 58 CVEs
chromedriver-153.0.8010.47-1.1 on GA media
These are all security issues fixed in the chromedriver-153.0.8010.47-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 18, 2026 -
Critical max 10.0SUSE-SU-2026:4268-1 143 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: * fixed: Deleting an Exchange account retained the outgoing server settings * fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 * fixed: Win…
first Sep 18, 2026 -
Critical max 9.6SUSE-SU-2026:4264-1 63 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371) - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…
first Sep 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11806-1 4 CVEs
kit-0.107.0-1.1 on GA media
These are all security issues fixed in the kit-0.107.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2026 -
Critical max 9.8openSUSE-SU-2026:11805-1 153 CVEs
kernel-devel-7.2.6-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2026 -
Critical max 9.8openSUSE-SU-2026:11803-1 18 CVEs
alloy-1.19.2-1.1 on GA media
These are all security issues fixed in the alloy-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:4259-1 4 CVEs
Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:4258-1 6 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:4256-1 5 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…
first Sep 17, 2026 -
Critical max 9.1SUSE-SU-2026:4251-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:4255-1 4 CVEs
Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 17, 2026 -
Critical max 9.1SUSE-SU-2026:4253-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
first Sep 17, 2026 -
Critical max 9.6SUSE-SU-2026:4247-1 63 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371) - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:4244-1 5 CVEs
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…
first Sep 17, 2026 -
Critical max 9.8openSUSE-SU-2026:21859-1 3 CVEs
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: Updated to 1.570.0 (1.57): See /usr/share/doc/packages/perl-Net-DNS/Changes . - Resync with IANA DNS parameters registry. - EDNS: Add support for MQTYPE-QUERY option. - Unbounde…
first Sep 15, 2026 -
Critical max 10.0openSUSE-SU-2026:21853-1 24 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001): * CVE-2026-75874 (bmo#2039972) Sandbox escape in the Remote Settings Client component * CVE-2026-84118 (bmo#2057457) Use-after-…
first Sep 15, 2026 -
Critical max 9.8openSUSE-SU-2026:11797-1 6 CVEs
freeipmi-1.6.19-1.1 on GA media
These are all security issues fixed in the freeipmi-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Critical max 9.6openSUSE-SU-2026:11796-1 63 CVEs
firefox-esr-153.3.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 16, 2026 -
Critical max 9.1SUSE-SU-2026:4237-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
-
Critical max 9.8SUSE-SU-2026:4231-1 5 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
-
Critical max 10.0SUSE-SU-2026:4212-1 21 CVEs
Security update for distribution
This update for distribution fixes the following issues: Security issues fixed: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260283). - CVE-2026-33540: information disclosur…
-
Critical max 9.6SUSE-SU-2026:4210-1 7 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs (bsc#1265542). - CVE-2026-33814: golang.org/x/net/http2: infinite…