5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:22386-1 7 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22385-1 7 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22384-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22383-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 10.0SUSE-SU-2026:22376-1 15 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-39821: golang.org/x/net/idna: failure to rejec…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:22367-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
Critical max 9.6SUSE-SU-2026:22351-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. …
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:22330-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
Critical max 9.6SUSE-SU-2026:22328-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCI…
first Jun 22, 2026 -
Critical max 9.6SUSE-SU-2026:22320-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues Update to version 1.103.2: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265843). - CVE-2026-39821: golang.org/x/net/idna: fa…
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:22315-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026 -
Critical max 9.6SUSE-SU-2026:22305-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
Critical max 9.8SUSE-SU-2026:2722-1 66 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68822: Input: alps - fix use-…
first Jul 1, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resour…
first Jun 30, 2026 -
Critical max 9.8SUSE-SU-2026:2195-1 69 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resourc…
-
Critical max 9.3openSUSE-SU-2026:11159-1 1 CVE
python311-jupyter-server-2.20.0-1.1 on GA media
These are all security issues fixed in the python311-jupyter-server-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Critical max 9.6openSUSE-SU-2026:11153-1 4 CVEs
cadvisor-0.60.3-1.1 on GA media
These are all security issues fixed in the cadvisor-0.60.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Critical max 9.1SUSE-SU-2026:2715-1 5 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release. - CVE-2026-34986: Update github.com/go-jose/go-jose/v3+v4 dependency (bsc#1262856). - CVE-2026-39829, CVE-2026-39830, CVE-2026-42508, CVE-2026-46598: Update golang.org/x/crypto/ssh de…
first Jun 30, 2026 -
Critical max 10.0SUSE-SU-2026:2706-1 25 CVEs
Security update for buildah
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,gith…
first Jun 30, 2026 -
Critical max 9.1SUSE-SU-2026:2693-1 5 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-…
first Jun 30, 2026 -
Critical max 9.6SUSE-SU-2026:2692-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 30, 2026 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 29, 2026 -
Critical max 9.6openSUSE-SU-2026:21157-1 1 CVE
Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615)
first Jun 25, 2026 -
Critical max 9.6openSUSE-SU-2026:21151-1 5 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated go-jose to fix CVE-2026-34986 (bsc#1262810) - chi is fixed in the upstream project - updating to v4.7.0 with following security fixes * fixed CVE-2026-39821 (bsc#1266483) * …
first Jun 23, 2026 -
Critical max 9.8openSUSE-SU-2026:21144-1 15 CVEs
Security update for mbedtls
This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to 3.6.6 (LTS maintenance update from 3.6.1); security fixes accumulated across the 3.6.2-3.6.6 releases: * CVE-2024-49195 (boo#1231708): buffer underrun in pkwrite when writing …
first Jun 22, 2026 -
Critical max 9.8openSUSE-SU-2026:21142-1 1 CVE
Security update for perl-Compress-Raw-Zlib
This update for perl-Compress-Raw-Zlib fixes the following issues: Changes in perl-Compress-Raw-Zlib: - updated to 2.222 see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes 2.222 27 February 2026 * Add SECURITY.md. Fixes #40 * Fix spelling typos 2.221 …
first Jun 19, 2026 -
Critical max 9.8openSUSE-SU-2026:21122-1 7 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21121-1 7 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 10.0openSUSE-SU-2026:21120-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
Critical max 9.1openSUSE-SU-2026:21119-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via send_file() (bsc#1266370).
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21117-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …
first Jun 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21115-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
Critical max 10.0openSUSE-SU-2026:21084-1 16 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Pun…
first Jun 18, 2026 -
Critical max 9.1openSUSE-SU-2026:21083-1 11 CVEs
Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…
first Jun 18, 2026 -
Critical max 10.0openSUSE-SU-2026:21079-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 17, 2026 -
Critical max 10.0openSUSE-SU-2026:21069-1 15 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-39821: golang.org/x/net/idna: failure to rejec…
first Jun 26, 2026 -
Critical max 9.6openSUSE-SU-2026:21060-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
Critical max 9.6openSUSE-SU-2026:21013-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues Update to version 1.103.2: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265843). - CVE-2026-39821: golang.org/x/net/idna: fa…
first Jun 22, 2026 -
Critical max 9.6openSUSE-SU-2026:21010-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCI…
first Jun 22, 2026 -
Critical max 9.1openSUSE-SU-2026:21005-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026