5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:23375-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23374-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23373-1 20 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23372-1 21 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23370-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23368-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23367-1 19 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23366-1 19 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.1SUSE-SU-2026:23361-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). Changes …
first Aug 26, 2026 -
Critical max 9.1SUSE-SU-2026:23350-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). Changes …
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23343-1 24 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23342-1 12 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpol…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23341-1 24 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23340-1 23 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23339-1 23 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23337-1 23 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23336-1 21 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23335-1 20 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23334-1 20 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23333-1 20 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23331-1 19 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23330-1 15 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23329-1 15 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
Critical max 9.1SUSE-SU-2026:23323-1 41 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). …
first Aug 26, 2026 -
Critical max 9.6SUSE-SU-2026:23300-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.13 (released 2026-08-13, bsc#1244485). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive st…
first Aug 19, 2026 -
Critical max 9.8SUSE-SU-2026:23304-1 31 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalati…
first Aug 19, 2026 -
Critical max 9.6SUSE-SU-2026:23301-1 9 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 (released 2026-08-13, bsc#1255111). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive str…
first Aug 19, 2026 -
Critical max 9.1SUSE-SU-2026:3835-1 4 CVEs
Security update for openssl, openssl-3
This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: (jsc#PED-16072) * Enables Post-Quantum Cryptography (PQC) TLS support Security issues fixed: * CVE-2026-42764: NULL pointer dereference in QUIC server in…
-
Critical max 9.8openSUSE-SU-2026:21793-1 6 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.0 (bsc#1265425, CVE-2026-41888): * `v2.1.0` is a **minor** release built on the containerd- native foundation laid down in `v2.0.0`. The headline is that `hauler store sync`…
first Sep 3, 2026 -
Critical max 9.9openSUSE-SU-2026:21788-1 9 CVEs
Security update for lxd
This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: * bsc#1274937, CVE-2026-63293, bsc#1274936, CVE-2026-62420, bsc#1274954, CVE-2026-63295, bsc#1274963, CVE-2026-63297, bsc#1274961, CVE-2026-63296, bsc#1275085, CVE-2026-63299,…
first Sep 2, 2026 -
Critical max 9.6openSUSE-SU-2026:21786-1 2 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor: * go.opentelemetry.io/otel@v1.44.0 (bsc#1276727, CVE-2026-41178) - update to 0.60.5 (bsc#1266645, CVE-2026-39821): * build: discover bootstrap image tag instead of pinn…
first Sep 2, 2026 -
Critical max 9.1openSUSE-SU-2026:21774-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-20…
first Sep 6, 2026 -
Critical max 10.0openSUSE-SU-2026:21761-1 181 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260827T195228 2026-08-27T19:52:28Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5026 CVE-2026-39821 * GO-2026-6225 * GO-2026-6…
first Sep 4, 2026 -
Critical max 9.8openSUSE-SU-2026:21744-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…
first Sep 2, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet_de…
-
Critical max 9.8openSUSE-SU-2026:11718-1 4 CVEs
helm-4.2.4-3.1 on GA media
These are all security issues fixed in the helm-4.2.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:11716-1 9 CVEs
ffmpeg-4-4.4.8-5.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:11722-1 1 CVE
perl-DBD-Pg-3.21.2-1.1 on GA media
These are all security issues fixed in the perl-DBD-Pg-3.21.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:11719-1 8 CVEs
gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026 -
Critical max 9.8
chromedriver-152.0.7977.82-1.1 on GA media
These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 8, 2026