5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:4203-1 11 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE…
-
Critical max 10.0SUSE-SU-2026:4209-1 27 CVEs
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946). - CVE-2026-25680: golang.org/x/net/html: denial of service when parsing arbitrary HTML (bsc#…
-
Critical max 9.8openSUSE-SU-2026:11791-1 1 CVE
sngrep-1.8.4-2.1 on GA media
These are all security issues fixed in the sngrep-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Critical max 9.1openSUSE-SU-2026:11784-1 2 CVEs
libcjose-devel-0.6.2.8-2.1 on GA media
These are all security issues fixed in the libcjose-devel-0.6.2.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Critical max 9.1SUSE-SU-2026:23512-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837). - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (b…
first Sep 2, 2026 -
Critical max 9.8SUSE-SU-2026:4190-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369). - CVE-2026-52955: libceph: Fix pote…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:4126-1 11 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE…
first Sep 11, 2026 -
Critical max 9.8SUSE-SU-2026:23541-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23240: tls: Fix race condition in tls…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23537-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023). - CVE-2026-53246: sctp:…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23536-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix po…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23535-1 9 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23534-1 11 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpoll: fix e…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23533-1 13 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp: validat…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23532-1 18 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23531-1 18 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731). - CVE-2025-68214: timers: Fix NULL funct…
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23522-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#12…
first Sep 4, 2026 -
Critical max 9.8SUSE-SU-2026:4175-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#12…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4170-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: i…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4149-1 17 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption (bsc#1269550). - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4172-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64…
first Sep 14, 2026 -
Critical max 10.0SUSE-SU-2026:4156-1 139 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen
This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR * Fixed: Various security fixes. MFSA 2026-85 (bsc#127800…
first Sep 14, 2026 -
Critical max 9.1SUSE-SU-2026:4151-1 1 CVE
Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issue: - CVE-2026-15747: exposing a stable representation of the session CSRF token to a BREACH compression oracle (bsc#1271431).
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4150-1 17 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption (bsc#1269550). - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c…
first Sep 14, 2026 -
Critical max 10.0openSUSE-SU-2026:11778-1 2 CVEs
mistral-vibe-2.25.4-1.1 on GA media
These are all security issues fixed in the mistral-vibe-2.25.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23506-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23489-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023). - CVE-2026-53246: sctp:…
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23439-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23434-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23431-1 20 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23430-1 21 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23488-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix po…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23487-1 9 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23428-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23426-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944). - CVE-2025-68214: timers: Fix NULL function pointer ra…
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:4119-1 11 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - C…
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:4114-1 11 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - C…
first Sep 9, 2026