5,613 results · Clear filters · Feed
-
Critical max 9.6openSUSE-SU-2026:20994-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
Critical max 9.6SUSE-SU-2026:22285-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22283-1 7 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22282-1 6 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22281-1 6 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22280-1 7 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22279-1 7 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22278-1 7 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22277-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22276-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22257-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
Critical max 9.4openSUSE-SU-2026:21072-1 7 CVEs
Security update for trivy
This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption (bsc#1267268). - CVE-2026…
first Jun 26, 2026 -
Critical max 9.6openSUSE-SU-2026:21043-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. …
first Jun 24, 2026 -
Critical max 9.8openSUSE-SU-2026:21029-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
Critical max 9.1openSUSE-RU-2026:21160-1 4 CVEs
Recommended update for dnscrypt-proxy
This update for dnscrypt-proxy fixes the following issues: Changes in dnscrypt-proxy: - Update to version 2.1.16 * The "tls_cipher_suite" option is now a no-op. Modern TLS stacks no longer expose cipher suite selection in a meaningful way, and the option had …
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22288-1 6 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 26, 2026 -
Critical max 9.1SUSE-SU-2026:22251-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026 -
Critical max 9.8openSUSE-SU-2026:21168-1 56 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 (bsc#1268071) * CVE-2026-12289 (bmo#2023443) Privilege escalation in the Graphics: WebRender component * CVE-2026-122…
first Jun 29, 2026 -
Critical max 9.1openSUSE-SU-2026:11150-1 1 CVE
skopeo-1.23.0-1.1 on GA media
These are all security issues fixed in the skopeo-1.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
Critical max 9.6openSUSE-SU-2026:11144-1 4 CVEs
docker-29.4.0_ce-40.1 on GA media
These are all security issues fixed in the docker-29.4.0_ce-40.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2026 -
Critical max 9.6SUSE-SU-2026:2683-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266604).
first Jun 29, 2026 -
Critical max 9.6SUSE-SU-2026:2682-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266604).
first Jun 29, 2026 -
Critical max 9.8SUSE-SU-2026:2675-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …
first Jun 29, 2026 -
Critical max 10.0SUSE-SU-2026:2665-1 18 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260264). - CVE-2026-39821: Update golang.org/x/net/idna depend…
first Jun 26, 2026 -
Critical max 9.1SUSE-SU-2026:2664-1 7 CVEs
Security update for python, python-base, python-doc
This update for python, python-base, python-doc fixes the following issues Security fixes: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599). - CVE-2026-3…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2640-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2639-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2…
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:2638-1 21 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:2658-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2643-1 6 CVEs
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues - CVE-2022-1996: CORS bypass (bsc#1200528). - CVE-2022-2385: aws-iam-authenticator AccessKeyID validation bypass (bsc#1201395). - CVE-2024-39689: remove root certificates from `GLOBALTRUST` from…
first Jun 26, 2026 -
Critical max 10.0SUSE-SU-2026:22249-1 22 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…
first Jun 22, 2026 -
Critical max 10.0SUSE-SU-2026:22242-1 23 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533). - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity w…
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:2636-1 5 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-…
first Jun 25, 2026 -
Critical max 10.0openSUSE-SU-2026:11126-1 49 CVEs
velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Critical max 9.8openSUSE-SU-2026:11119-1 14 CVEs
libeverest-3.6.6-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:2632-1 27 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:2631-1 21 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:2630-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after…
first Jun 25, 2026 -
Critical max 10.0SUSE-SU-2026:2612-1 22 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues Security issues: - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603). - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/…
first Jun 24, 2026 -
Critical max 10.0SUSE-SU-2026:2611-1 16 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603). - CVE-2026-39827: Update golang.org/x/crypto dep…
first Jun 24, 2026