5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:2500-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2494-1 4 CVEs
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:2493-1 12 CVEs
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: - Security: re-vendor Go dependencies to address CVEs tracked against containerized-data-importer (backport of upstream PR #4110, post-v1.65.0). Fixed by this update: * google.golang.org/…
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2482-1 103 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68324: scsi: imm: …
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2549-1 4 CVEs
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2532-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: …
first Jun 23, 2026 -
Critical max 9.6SUSE-SU-2026:22233-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
Critical max 10.0SUSE-SU-2026:22226-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22209-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22199-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22197-1 7 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22196-1 7 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22195-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:2518-1 4 CVEs
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 23, 2026 -
Critical max 10.0SUSE-SU-2026:22193-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
Critical max 9.1SUSE-SU-2026:22187-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via send_file() (bsc#1266370).
first Jun 20, 2026 -
Critical max 9.6openSUSE-SU-2026:11107-1 8 CVEs
containerd-1.7.33-1.1 on GA media
These are all security issues fixed in the containerd-1.7.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Critical max 9.8
apache-commons-validator-1.10.1-1.1 on GA media
These are all security issues fixed in the apache-commons-validator-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Critical max 9.4openSUSE-SU-2026:11102-1 5 CVEs
trivy-0.71.2-1.1 on GA media
These are all security issues fixed in the trivy-0.71.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Critical max 9.6SUSE-OU-2016:2857-1 1 CVE
Add headmore to SUSE PackageHub
This update makes headmore available in the SUSE Package Hub. headmore is a VNC client for character terminals.
first Nov 5, 2016 -
Critical max 9.6openSUSE-SU-2026:11071-1 33 CVEs
chromedriver-149.0.7827.155-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 20, 2026 -
Critical max 9.1openSUSE-SU-2026:11068-1 5 CVEs
python311-3.11.15-6.1 on GA media
These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2026 -
Critical max 10.0SUSE-SU-2026:2468-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 19, 2026 -
Critical max 9.6SUSE-SU-2026:2466-1 5 CVEs
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect results returned from Rows.Scan (bsc#1247720). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validati…
first Jun 19, 2026 -
Critical max 9.1SUSE-SU-2026:2464-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues Security issues: - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-478…
first Jun 19, 2026 -
Critical max 10.0SUSE-SU-2026:2467-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 19, 2026 -
Critical max 9.6openSUSE-SU-2026:11053-1 14 CVEs
alloy-1.17.0-1.1 on GA media
These are all security issues fixed in the alloy-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.1
kubevirt-1.8-container-disk-1.8.3-1.1 on GA media
These are all security issues fixed in the kubevirt-1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.6openSUSE-SU-2026:11055-1 29 CVEs
firefox-esr-140.12.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.8openSUSE-SU-2026:11052-1 40 CVEs
MozillaFirefox-152.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.1openSUSE-SU-2026:11060-1 3 CVEs
tinyproxy-1.11.3-3.1 on GA media
These are all security issues fixed in the tinyproxy-1.11.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2450-1 84 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: Add workaround for Cortex-A76 erratum 1286807 (bsc#1266290). - CVE-2025-40253: s390/ctcm: Fix double-kfree (b…
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2445-1 11 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues Update to version 4.4.7: - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec…
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2444-1 11 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues Update to version 4.4.7: - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec…
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:2442-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issues: - CVE-2026-8450: Fixed OS command injection via send_file() (bsc#1266370).
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2440-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-5928: libio: Fix ungetwc operating on byte stream (bsc#1262464, BZ #33998) - CVE-2026-5450: stdio-common: Fix buffer overflow in scanf %mc (bsc#1262465, BZ #34008) - CVE-2026-4046: Use pending chara…
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:22132-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2024-41996: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-…
first Jun 11, 2026 -
Critical max 9.1SUSE-SU-2026:22133-1 6 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Update to version 20260430.00: * Update dependencies and go version to 1.26.2 (#607) (bsc#1265762, CVE-2026-33814) * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604) (bsc#1260264, CVE…
first Jun 12, 2026 -
Critical max 9.8SUSE-SU-2026:22137-1 98 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68…
first Jun 15, 2026 -
Critical max 9.1SUSE-SU-2026:22141-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-system-agent: - Update to versio…
first Jun 11, 2026