5,613 results · Clear filters · Feed
-
Critical max 9.6openSUSE-SU-2026:11758-1 1 CVE
steampipe-2.4.6-1.1 on GA media
These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8openSUSE-SU-2026:11754-1 3 CVEs
perl-DBI-1.653.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.8
chromedriver-153.0.8010.36-1.1 on GA media
These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2026 -
Critical max 9.1openSUSE-SU-2026:11745-1 5 CVEs
perl-HTML-FormHandler-0.410.2-1.1 on GA media
These are all security issues fixed in the perl-HTML-FormHandler-0.410.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
Critical max 9.8openSUSE-SU-2026:11739-1 8 CVEs
389-ds-3.3.1+8c2711bd6-1.1 on GA media
These are all security issues fixed in the 389-ds-3.3.1+8c2711bd6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 10, 2026 -
Critical max 9.8openSUSE-SU-2026:21801-1 10 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates (bsc#1258543). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/r…
first Sep 7, 2026 -
Critical max 9.8openSUSE-SU-2026:21809-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:11734-1 1 CVE
perl-Authen-SASL-2.210.0-1.1 on GA media
These are all security issues fixed in the perl-Authen-SASL-2.210.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
Critical max 9.8SUSE-SU-2026:3897-1 31 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. - MFSA 2026-79 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalation in the DOM: N…
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23383-1 22 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23371-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23338-1 23 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8openSUSE-SU-2026:21811-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.1SUSE-SU-2026:3919-1 14 CVEs
Security update for dovecot22
This update for dovecot22 fixes the following issues: Security issues fixed: - CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799). - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after bare carriage return (bsc#1276802). - CVE-2026-33…
first Sep 2, 2026 -
Critical max 9.8SUSE-SU-2026:23384-1 22 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23369-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23332-1 19 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23328-1 6 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53224: s…
first Aug 26, 2026 -
Critical max 9.4SUSE-SU-2026:23305-1 1 CVE
Security update for qt6-svg
This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing `pattern` group nodes (bsc#1250994).
first Aug 24, 2026 -
Critical max 9.6openSUSE-SU-2026:21812-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:21810-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.1SUSE-SU-2026:3938-1 6 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input (bsc#1207866). - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion c…
first Sep 3, 2026 -
Critical max 9.1SUSE-SU-2026:3937-1 6 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input (bsc#1207866). - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion c…
first Sep 3, 2026 -
Critical max 9.1SUSE-SU-2026:3905-1 4 CVEs
Security update for libapr-util1
This update for libapr-util1 fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850…
first Sep 1, 2026 -
Critical max 9.1SUSE-SU-2026:3876-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). - CVE-2026-63074: CMP Indefinite …
first Aug 31, 2026 -
Critical max 9.1SUSE-SU-2026:3866-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release . - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). - CVE-…
first Aug 28, 2026 -
Critical max 10.0SUSE-SU-2026:23411-1 115 CVEs
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. * Fixed: Various security fixes. MFSA 2026-77 (bsc#1274867): * CVE-2026-74934 Site is…
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23390-1 19 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23389-1 20 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23388-1 21 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23387-1 21 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23386-1 22 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23385-1 22 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23382-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23381-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23380-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23379-1 13 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23378-1 18 CVEs
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23377-1 18 CVEs
Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23376-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026