5,613 results · Clear filters · Feed
-
Critical max 9.6openSUSE-SU-2026:11050-1 2 CVEs
warewulf4-4.7.0-1.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Critical max 10.0openSUSE-SU-2026:11046-1 4 CVEs
google-osconfig-agent-20260615.01-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260615.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Critical max 9.1SUSE-SU-2026:2438-1 6 CVEs
Security update for alloy
This update for alloy fixes the following issues Security issues: - CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message (bsc#1259919). - CVE-…
first Jun 17, 2026 -
Critical max 9.1SUSE-SU-2026:22128-1 6 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Changes in google-guest-agent: Update to version 20260430.00 * Update OWNERS (#609) * Update THIRD_PARTY_LICENSES to be package specific location. (#608) * Update dependencies and go version to 1.…
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:22127-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:22112-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Critical max 9.1SUSE-SU-2026:22101-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-system-agent: - Update to versio…
first Jun 11, 2026 -
Critical max 9.1SUSE-SU-2026:22100-1 9 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 11, 2026 -
Critical max 9.8SUSE-SU-2026:22099-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Critical max 9.8openSUSE-SU-2026:11043-1 1 CVE
python313-distributed-2026.6.0-1.1 on GA media
These are all security issues fixed in the python313-distributed-2026.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Critical max 9.8SUSE-SU-2026:22108-1 98 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68…
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:2421-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->cb i…
first Jun 16, 2026 -
Critical max 9.1SUSE-SU-2026:2408-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issues: - CVE-2026-8450: Fixed OS command injection via send_file() (bsc#1266370).
first Jun 16, 2026 -
Critical max 9.8SUSE-SU-2026:22087-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Critical max 10.0openSUSE-SU-2026:20956-1 21 CVEs
Security update for trivy
This update for trivy fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267047). - CVE-2026-33814: golang.org/x/net/http2: infinite loo…
first Jun 11, 2026 -
Critical max 9.8openSUSE-SU-2026:20962-1 2 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd (bsc#1251788) Remove var-run.mount from Requires and After - update to version 3.8.6 (bugfix rel…
first Jun 12, 2026 -
Critical max 10.0SUSE-SU-2026:22095-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on l…
first Jun 10, 2026 -
Critical max 9.0SUSE-SU-2026:22080-1 6 CVEs
Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…
first Jun 5, 2026 -
Critical max 9.8SUSE-SU-2026:22076-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Critical max 10.0openSUSE-SU-2026:11031-1 4 CVEs
google-guest-agent-20260529.00-2.1 on GA media
These are all security issues fixed in the google-guest-agent-20260529.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2026 -
Critical max 9.9SUSE-SU-2026:2401-1 7 CVEs
Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues Update to version 1.6.6, fixes various go embedded security issues: - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251420). - CVE-…
first Jun 15, 2026 -
Critical max 9.9SUSE-SU-2026:2400-1 7 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: Update to version 1.7.4, fixes various go embedded security issues: - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251420). - CVE-202…
first Jun 15, 2026 -
Critical max 9.1SUSE-SU-2026:2393-1 9 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 15, 2026 -
Critical max 9.6openSUSE-SU-2026:11029-1 28 CVEs
chromedriver-149.0.7827.114-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.114-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 14, 2026 -
Critical max 9.8openSUSE-SU-2026:11025-1 3 CVEs
python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Critical max 9.1openSUSE-SU-2026:11023-1 14 CVEs
libopenssl-3-devel-3.5.3-6.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.5.3-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 13, 2026 -
Critical max 9.6openSUSE-SU-2026:20940-1 24 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266600) - Update to version 11.6.14+security-04: Security: * CVE-2026…
first Jun 10, 2026 -
Critical max 10.0openSUSE-SU-2026:20933-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on l…
first Jun 10, 2026 -
Critical max 9.6SUSE-SU-2026:22075-1 9 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-operator: - Changes on top of v1.7.5…
first Jun 10, 2026 -
Critical max 10.0SUSE-SU-2026:22074-1 19 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to v2.2.9: * 0e33b2…
first Jun 10, 2026 -
Critical max 9.6SUSE-SU-2026:22066-1 9 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-operator: - Fix substitution - Fix r…
first Jun 10, 2026 -
Critical max 10.0SUSE-SU-2026:22065-1 19 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to version 2.1.6: *…
first Jun 10, 2026 -
Critical max 9.8openSUSE-SU-2026:11017-1 1 CVE
perl-GD-2.860.0-1.1 on GA media
These are all security issues fixed in the perl-GD-2.860.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.6
chromedriver-149.0.7827.102-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.102-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.1SUSE-SU-2026:2387-1 6 CVEs
Security update for python
This update for python fixes the following issues - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599). - CVE-2026-3219: pip doesn't reject concatenated ZIP …
first Jun 12, 2026 -
Critical max 9.8SUSE-SU-2026:2383-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31629: nfc: llcp: add missin…
first Jun 12, 2026 -
Critical max 9.1openSUSE-SU-2026:11015-1 2 CVEs
kubevirt-container-disk-1.8.3-1.1 on GA media
These are all security issues fixed in the kubevirt-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.8openSUSE-SU-2026:11014-1 57 CVEs
kernel-devel-7.0.12-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.6openSUSE-SU-2026:11012-1 1 CVE
golang-github-prometheus-node_exporter-1.11.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-node_exporter-1.11.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026 -
Critical max 9.6openSUSE-SU-2026:11011-1 1 CVE
golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 12, 2026