5,613 results · Clear filters · Feed
-
Critical max 9.0openSUSE-SU-2026:21283-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memory manag…
first Jul 10, 2026 -
Critical max 10.0openSUSE-SU-2026:21281-1 19 CVEs
Security update for cosign
This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…
first Jul 10, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bondi…
first Jul 11, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…
first Jul 11, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of…
first Jul 11, 2026 -
Critical max 9.6SUSE-SU-2026:2852-1 29 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140…
first Jul 10, 2026 -
Critical max 9.8
python313-Pillow-12.3.0-1.1 on GA media
These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2026 -
Critical max 9.6openSUSE-SU-2026:11254-1 27 CVEs
chromedriver-150.0.7871.114-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.114-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 11, 2026 -
Critical max 9.8openSUSE-SU-2026:21272-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 8, 2026 -
Critical max 9.6openSUSE-SU-2026:21277-1 2 CVEs
Security update for go-sendxmpp
This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.16.0: Added: * Add Ox support to http-upload. * Add Ox support for private group chats. * Show error cause if joining MUCs failedi (requires go-xmpp >= v0.3.5). Chan…
first Jul 8, 2026 -
Critical max 9.0openSUSE-SU-2026:21273-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…
first Jul 8, 2026 -
Critical max 9.8openSUSE-SU-2026:11248-1 49 CVEs
python313-Django-5.2.16-1.1 on GA media
These are all security issues fixed in the python313-Django-5.2.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 10, 2026 -
Critical max 9.8SUSE-SU-2026:2841-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145). - CVE-2026-43038: ipv6: …
first Jul 10, 2026 -
Critical max 9.8SUSE-SU-2026:2840-1 30 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145). - CVE-2026-43038: ipv…
first Jul 10, 2026 -
Critical max 9.8SUSE-SU-2026:2839-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416). - CVE-2026-43198: tcp: fix potent…
first Jul 10, 2026 -
Critical max 9.8openSUSE-SU-2026:11235-1 59 CVEs
python313-Django4-4.2.30-4.1 on GA media
These are all security issues fixed in the python313-Django4-4.2.30-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Critical max 9.8openSUSE-SU-2026:11230-1 18 CVEs
curl-8.21.0-1.1 on GA media
These are all security issues fixed in the curl-8.21.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Critical max 9.0openSUSE-SU-2026:11244-1 2 CVEs
xorg-x11-server-21.1.21-8.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.21-8.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Critical max 9.8openSUSE-SU-2026:11234-1 3 CVEs
perl-DBI-1.650.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
Critical max 9.6SUSE-SU-2026:2830-1 4 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Update to v4.7.0. Security issues fixed: - CVE-2025-69725: incorrect input validation in the `RedirectSlashes` function can lead to an open redirect (bsc#1258511). - CVE-2026-33814: golang.org/x/net/http2:…
first Jul 9, 2026 -
Critical max 10.0SUSE-SU-2026:2827-1 19 CVEs
Security update for cosign
This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…
first Jul 9, 2026 -
Critical max 10.0SUSE-SU-2026:2824-1 27 CVEs
Security update for alloy
This update for alloy fixes the following issues - CVE-2026-10722: github.com/cilium/ebpf: BTF string offset boundary check can lead to crash when parsing malformed ELF/BTF input (bsc#1267811). - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE…
first Jul 9, 2026 -
Critical max 9.6SUSE-SU-2026:2823-1 2 CVEs
Security update for helm
This update for helm fixes the following issues - Update to version 3.21.2 - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: ora…
first Jul 9, 2026 -
Critical max 9.6SUSE-SU-2026:2814-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Removed obsolete mozilla-nss-certs and recommends p11-kit-nss-trust (bsc#1269226) Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: …
first Jul 9, 2026 -
Critical max 9.8SUSE-SU-2026:21230-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…
first Apr 20, 2026 -
Critical max 9.6openSUSE-SU-2026:21241-1 4 CVEs
Security update for buildah
This update for buildah fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39829: golang.org/x/crypto/ssh: pa…
first Jul 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: …
first Jul 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: fix…
first Jul 6, 2026 -
Critical max 10.0SUSE-SU-2026:22516-1 22 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39827: Invoking memory le…
first Jul 3, 2026 -
Critical max 9.6SUSE-SU-2026:22513-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jul 2, 2026 -
Critical max 9.8SUSE-SU-2026:22117-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:22043-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Critical max 9.8SUSE-SU-2026:21834-1 206 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420). - CVE-2025-40181:…
first May 28, 2026 -
Critical max 9.8SUSE-SU-2026:21780-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206). - CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 …
first May 18, 2026 -
Critical max 9.2SUSE-SU-2026:21136-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:20570-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Critical max 9.8SUSE-SU-2026:20564-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026 -
Critical max 9.8SUSE-SU-2026:20562-1 100 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …
first Dec 19, 2025 -
Critical max 9.8SUSE-SU-2026:20561-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…
first Nov 26, 2025