5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2026:3094-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 17, 2026 -
Critical max 9.1openSUSE-SU-2026:11299-1 4 CVEs
perl-YAML-Syck-1.470.0-1.1 on GA media
These are all security issues fixed in the perl-YAML-Syck-1.470.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Critical max 9.6openSUSE-SU-2026:11290-1 6 CVEs
gomuks-26.03+git.1780250926.564a8707-1.1 on GA media
These are all security issues fixed in the gomuks-26.03+git.1780250926.564a8707-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2026 -
Critical max 9.8SUSE-SU-2026:3089-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145). - CVE-2026-43038: ipv6: icm…
first Jul 17, 2026 -
Critical max 9.1SUSE-SU-2026:22648-1 6 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22647-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.56. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22646-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:22638-1 30 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.…
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22623-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 10, 2026 -
Critical max 9.0SUSE-SU-2026:22617-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memory manag…
first Jul 10, 2026 -
Critical max 10.0SUSE-SU-2026:22613-1 19 CVEs
Security update for cosign
This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…
first Jul 10, 2026 -
Critical max 9.1SUSE-SU-2026:3087-1 6 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bond…
first Jul 16, 2026 -
Critical max 9.6openSUSE-SU-2026:11287-1 15 CVEs
chromedriver-150.0.7871.124-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.124-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 16, 2026 -
Critical max 9.1SUSE-SU-2026:3088-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 16, 2026 -
Critical max 9.8SUSE-SU-2026:3067-1 3 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues The following security issues were fixed: - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-45970: bonding: alb: fix UAF in r…
first Jul 16, 2026 -
Critical max 9.8SUSE-SU-2026:3066-1 7 CVEs
Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …
first Jul 13, 2026 -
Critical max 9.1SUSE-SU-2026:22592-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 10, 2026 -
Critical max 9.8openSUSE-SU-2026:11281-1 4 CVEs
opennlp-1.9.5-1.1 on GA media
These are all security issues fixed in the opennlp-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Critical max 10.0SUSE-SU-2026:3056-1 41 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Jul 15, 2026 -
Critical max 9.1openSUSE-SU-2026:11282-1 1 CVE
perl-Mojolicious-9.480.0-1.1 on GA media
These are all security issues fixed in the perl-Mojolicious-9.480.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3065-1 7 CVEs
Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
Critical max 9.6SUSE-SU-2026:3057-1 11 CVEs
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issues - CVE-2022-41723: go1.19,go1.20: net/http2: quadratic complexity in HPACK decoding (bsc#1208300). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper vali…
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3044-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145). - CVE-2026-43038: ipv6: …
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3043-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3011-1 7 CVEs
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
Critical max 9.1SUSE-SU-2026:3005-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43037: ip6_tunnel: clea…
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:2995-1 7 CVEs
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Critical max 9.8openSUSE-SU-2026:21319-1 30 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:22582-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 8, 2026 -
Critical max 10.0SUSE-SU-2026:22575-1 26 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to version 1.17.0. Security issues fixed: - CVE-2026-25680: golang.org/x/net/html: parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service (bsc#1267185). - CVE-2026-…
first Jul 7, 2026 -
Critical max 9.8SUSE-SU-2026:22572-1 24 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go1.26.4 (bsc#1255111). Security issues fixed: - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption a…
first Jul 7, 2026 -
Critical max 9.6SUSE-SU-2026:22567-1 4 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…
first Jul 7, 2026 -
Critical max 9.8SUSE-SU-2026:22564-1 13 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …
first Jul 6, 2026 -
Critical max 10.0SUSE-SU-2026:22558-1 22 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…
first Jul 6, 2026 -
Critical max 9.8SUSE-SU-2026:2994-1 7 CVEs
Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2992-1 7 CVEs
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2991-1 10 CVEs
Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43037: ip6_tunnel: cl…
first Jul 14, 2026