5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:3723-1 14 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-…
first Aug 24, 2026 -
Critical max 9.6SUSE-SU-2026:3713-1 8 CVEs
Security update for Multi-Linux Manager Client Tools - Monitoring stack
This update fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615) golang-github-prometheus-prometheus updated from versi…
-
Critical max 9.8SUSE-SU-2026:3706-1 14 CVEs
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-…
first Aug 23, 2026 -
Critical max 9.6SUSE-RU-2026:3712-1 1 CVE
Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 * Added known issue for missing BasicConstraints Critical flag * Added a note about disk-check parameters semantics change * Added a note about enabli…
-
Critical max 10.0openSUSE-SU-2026:11580-1 58 CVEs
MozillaFirefox-154.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-154.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 23, 2026 -
Critical max 9.8openSUSE-SU-2026:11570-1 1 CVE
python313-django-allauth-65.19.1-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
Critical max 9.8openSUSE-SU-2026:11564-1 1 CVE
perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 on GA media
These are all security issues fixed in the perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
Critical max 9.6openSUSE-SU-2026:11561-1 15 CVEs
chromedriver-151.0.7922.169-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 21, 2026 -
Critical max 9.6SUSE-SU-2026:23170-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Aug 7, 2026 -
Critical max 9.6SUSE-SU-2026:23162-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: ora…
first Aug 4, 2026 -
Critical max 9.8openSUSE-SU-2026:11546-1 52 CVEs
firefox-esr-153.1.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Critical max 9.8openSUSE-SU-2026:11551-1 4 CVEs
perl-Net-OAuth-0.330.0-1.1 on GA media
These are all security issues fixed in the perl-Net-OAuth-0.330.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Critical max 9.6openSUSE-SU-2026:11548-1 1 CVE
glab-1.114.0-1.1 on GA media
These are all security issues fixed in the glab-1.114.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 19, 2026 -
Critical max 9.6openSUSE-SU-2026:21592-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.13 (released 2026-08-13, bsc#1244485). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive st…
first Aug 19, 2026 -
Critical max 10.0openSUSE-SU-2026:21590-1 25 CVEs
Security update for kubevirt1.8
This update for kubevirt1.8 fixes the following issues: Update to version 1.8.4. Security issues fixed: - CVE-2026-13201: virt-handler-rhel9: kubevirt: safepath `OpenAtNoFollow` symlink following via `/proc/self/fd` allows host file metadata modification (bsc…
first Aug 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11560-1 21 CVEs
erlang27-27.1.3-3.1 on GA media
These are all security issues fixed in the erlang27-27.1.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
Critical max 9.1openSUSE-SU-2026:11559-1 24 CVEs
erlang-28.5.0.4-1.1 on GA media
These are all security issues fixed in the erlang-28.5.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
Critical max 9.1openSUSE-SU-2026:21603-1 7 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below (bsc#1253576): * CVE-2025-47913: golang.org/x/crypto/ssh/agent client process termination on an unexpec…
first Aug 18, 2026 -
Critical max 9.9openSUSE-SU-2026:21599-1 6 CVEs
Security update for kitty
This update for kitty fixes the following issues: Changes in kitty: - Update to 0.48.2: * Wayland: Fix regression in previous release that broke drag and drop on Plasma (#10284) * diff kitten: Fix a rare crash when showing a large diff due to incorrect lockin…
first Aug 18, 2026 -
Critical max 9.8openSUSE-SU-2026:21594-1 31 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalati…
first Aug 19, 2026 -
Critical max 9.6openSUSE-SU-2026:21593-1 9 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 (released 2026-08-13, bsc#1255111). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive str…
first Aug 19, 2026 -
Critical max 9.8openSUSE-SU-2026:11558-1 31 CVEs
MozillaThunderbird-140.14.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2026 -
Critical max 9.1SUSE-SU-2026:3657-1 33 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under 'use chroot = no' (bsc#1269042). …
first Aug 20, 2026 -
Critical max 10.0SUSE-SU-2026:3658-1 58 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 (bsc#1274867) - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escalat…
first Aug 20, 2026 -
Critical max 9.1SUSE-SU-2026:3645-1 19 CVEs
Security update for erlang
This update for erlang fixes the following issues: - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning (bsc#1261726). - CVE-2026-42789: `public_key` application accepts non-CA certificates as intermediate issuers and this enables c…
first Aug 18, 2026 -
Critical max 9.8openSUSE-SU-2026:11543-1 10 CVEs
xrdp-0.10.6.1-1.1 on GA media
These are all security issues fixed in the xrdp-0.10.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11536-1 9 CVEs
go1.27-1.27rc3-1.1 on GA media
These are all security issues fixed in the go1.27-1.27rc3-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 18, 2026 -
Critical max 9.6SUSE-SU-2026:3641-1 9 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Security issues fixed: - CVE-2026-33818: encoding/asn1: enforce maximum recursion depth (bsc#1275034). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for …
-
Critical max 9.6SUSE-SU-2026:3640-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Security issues fixed: - CVE-2026-33818: encoding/asn1: enforce maximum recursion depth (bsc#1275034). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for …
-
Critical max 9.1SUSE-SU-2026:3634-1 34 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under 'use chroot = no' (bsc#1269042). …
first Aug 17, 2026 -
Critical max 9.6SUSE-SU-2026:3630-1 16 CVEs
Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6
This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-c…
first Aug 17, 2026 -
Critical max 9.6openSUSE-SU-2026:11514-1 12 CVEs
containerized-data-importer1.66-api-1.66.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
Critical max 9.6openSUSE-SU-2026:11520-1 10 CVEs
kubevirt1.9-container-disk-1.9.0-1.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
Critical max 9.2openSUSE-SU-2026:11519-1 1 CVE
kubeshark-cli-53.4.0-1.1 on GA media
These are all security issues fixed in the kubeshark-cli-53.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
Critical max 9.6openSUSE-SU-2026:11517-1 9 CVEs
go1.26-1.26.6-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
Critical max 9.6openSUSE-SU-2026:11516-1 9 CVEs
go1.25-1.25.13-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …
first Aug 11, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …
first Aug 11, 2026 -
Critical max 9.0SUSE-SU-2026:23151-1 2 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…
first Aug 6, 2026 -
Critical max 9.0SUSE-SU-2026:23128-1 2 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…
first Aug 6, 2026