5,613 results · Clear filters · Feed
-
Critical max 9.2SUSE-SU-2026:21253-1 2 CVEs
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…
first Apr 16, 2026 -
Critical max 9.2SUSE-SU-2026:21241-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…
first Apr 16, 2026 -
Critical max 9.2SUSE-SU-2026:21256-1 2 CVEs
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob…
first Apr 17, 2026 -
Critical max 9.1
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (bsc#1261852). - …
first Apr 22, 2026 -
Critical max 9.1openSUSE-SU-2026:20603-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).
first Apr 22, 2026 -
Critical max 9.1openSUSE-SU-2026:20609-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Update to version 20250506.01 (bsc#1243254, bsc#1243505). Security issues fixed: - CVE-2024-45337: golang.org/x/crypto/ssh: misuse of the ServerConfig.PublicKeyCallback callback can lead to author…
first Apr 22, 2026 -
Critical max 9.1
Security update for tomcat10
This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…
first Apr 22, 2026 -
Critical max 9.1
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…
first Apr 23, 2026 -
Critical max 9.8SUSE-SU-2026:1573-1 40 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-6879…
first Apr 23, 2026 -
Critical max 10.0SUSE-SU-2026:1567-1 1 CVE
Security update for perl
This update for perl fixes the following issue: - CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow (bsc#1262486).
first Apr 23, 2026 -
Critical max 9.8SUSE-SU-2026:1555-1 7 CVEs
Security update for libraw
This update for libraw fixes the following issues: - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499). - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671). - CVE-2026-2…
first Apr 22, 2026 -
Critical max 9.8SUSE-SU-2026:1556-1 6 CVEs
Security update for libraw
This update for libraw fixes the following issues: - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499). - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671). - CVE-2026-2…
first Apr 22, 2026 -
Critical max 9.1
Security update for tomcat11
This update for tomcat11 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…
first Apr 22, 2026 -
Critical max 9.1
Security update for tomcat11
This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…
first Apr 21, 2026 -
Critical max 9.8SUSE-SU-2026:21237-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…
first Apr 20, 2026 -
Critical max 9.3openSUSE-SU-2026:10604-1 1 CVE
ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rack-session-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
Critical max 9.1openSUSE-SU-2026:10601-1 12 CVEs
grafana-11.6.14+security01-1.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security01-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
Critical max 9.3SUSE-SU-2026:1541-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-34078: improper processing of app-controlled symlinks by sandbox-expose can lead to sandbox escape, host file access and code execution in the host context (bsc#1261769). - CVE-2026-34079: imprope…
first Apr 22, 2026 -
Critical max 9.1openSUSE-SU-2026:20584-1 1 CVE
Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.47.0 * Add sticky choice option for leastping * Add support for enrollment links in tlsmirror * Add Wireguard Outbound (unreleased) * Add sticky choice option …
first Apr 16, 2026 -
Critical max 9.8openSUSE-SU-2026:20571-1 10 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: - Update to version go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…
first Apr 20, 2026 -
Critical max 9.8openSUSE-SU-2026:20570-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: - Update to version go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…
first Apr 20, 2026 -
Critical max 9.1openSUSE-SU-2026:20555-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 17, 2026 -
Critical max 9.8openSUSE-SU-2026:20523-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
first Apr 13, 2026 -
Critical max 9.2openSUSE-SU-2026:20540-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
Critical max 9.2openSUSE-SU-2026:20504-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…
first Apr 10, 2026 -
Critical max 9.8openSUSE-SU-2026:20486-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.9.1 ESR (bsc#1261663). - MFSA 2026-27: * CVE-2026-5731: memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, F…
first Apr 9, 2026 -
Critical max 9.1SUSE-SU-2026:21210-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 17, 2026 -
Critical max 9.2openSUSE-SU-2026:20502-1 2 CVEs
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…
first Apr 10, 2026 -
Critical max 9.2SUSE-SU-2026:21197-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
Critical max 9.8SUSE-SU-2026:21184-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
first Apr 13, 2026 -
Critical max 9.2SUSE-SU-2026:21168-1 2 CVEs
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…
first Apr 10, 2026 -
Critical max 9.2SUSE-SU-2026:21167-1 2 CVEs
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…
first Apr 10, 2026 -
Critical max 9.2SUSE-SU-2026:21166-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…
first Apr 10, 2026 -
Critical max 9.2openSUSE-SU-2026:20503-1 2 CVEs
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…
first Apr 10, 2026 -
Critical max 9.8SUSE-SU-2026:21157-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.9.1 ESR (bsc#1261663). - MFSA 2026-27: * CVE-2026-5731: memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, F…
first Apr 9, 2026 -
Critical max 9.8openSUSE-SU-2026:20578-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation (bsc#1261729) - CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin (bsc#1261731) - CVE-2026-4292:…
first Apr 13, 2026 -
Critical max 9.8openSUSE-SU-2026:20574-1 7 CVEs
Security update for libraw
This update for libraw fixes the following issues: - CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read (bsc#1261499). - CVE-2026-20884: integer overflow vulnerability in the deflate_dng_load_raw (bsc#1261671). - CVE-2026-20889: heap-based b…
first Apr 20, 2026 -
Critical max 9.3openSUSE-SU-2026:10587-1 10 CVEs
calibre-9.7.0-1.1 on GA media
These are all security issues fixed in the calibre-9.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 21, 2026 -
Critical max 9.3SUSE-SU-2026:1511-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769). - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770…
first Apr 21, 2026 -
Critical max 9.8openSUSE-SU-2026:20572-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…
first Apr 20, 2026