5,593 results · Clear filters · Feed
-
Critical max 10.0SUSE-SU-2026:5091-1 1077 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix O…
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:5086-1 7 CVEs
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). - CVE-2026-74469: sctp…
-
Critical max 9.8SUSE-SU-2026:5084-1 4 CVEs
Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89551: SUNRPC: xdr_buf_trim…
-
Critical max 9.8SUSE-SU-2026:5085-1 5 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_op…
-
Critical max 9.8SUSE-SU-2026:5075-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
Critical max 9.1SUSE-SU-2026:5073-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). - CVE-2026-74049: Jasper JSTL <c:redirect> plug-in implementation omits page abort (bsc#1286555). - CVE-2026-88041: I…
-
Critical max 9.8SUSE-SU-2026:5069-1 31 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-…
-
Critical max 9.8SUSE-SU-2026:5058-1 9 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in ne…
-
Critical max 9.8SUSE-SU-2026:5077-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
Critical max 9.8SUSE-SU-2026:5076-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
Critical max 9.8SUSE-SU-2026:5068-1 31 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-…
-
Critical max 9.1SUSE-SU-2026:5064-1 8 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
-
Critical max 9.8SUSE-SU-2026:5059-1 10 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…
-
Critical max 9.8SUSE-SU-2026:5053-1 11 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite l…
-
Critical max 9.8SUSE-SU-2026:5052-1 8 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
-
Critical max 9.8SUSE-SU-2026:5071-1 13 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#126…
-
Critical max 9.8SUSE-SU-2026:5055-1 10 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in n…
-
Critical max 9.8openSUSE-SU-2026:12390-1 10 CVEs
python313-Authlib-1.9.1-1.1 on GA media
These are all security issues fixed in the python313-Authlib-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5016-1 12 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on s…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5012-1 9 CVEs
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 2, 2026 -
Critical max 9.1SUSE-RU-2026:5018-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5048-1 8 CVEs
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 2, 2026 -
Critical max 9.2SUSE-SU-2026:5038-1 29 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802). - CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to un…
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5034-1 8 CVEs
Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs24
This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char …
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5020-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in net…
-
Critical max 9.8SUSE-SU-2026:5019-1 8 CVEs
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
-
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
Critical max 9.8SUSE-SU-2026:4954-1 21 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2…
first Oct 30, 2026 -
Critical max 9.6openSUSE-SU-2026:12377-1 21 CVEs
chromedriver-156.0.8078.79-1.1 on GA media
These are all security issues fixed in the chromedriver-156.0.8078.79-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4984-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on sub…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4983-1 9 CVEs
Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4979-1 8 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4978-1 10 CVEs
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4977-1 9 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4972-1 8 CVEs
Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Oct 31, 2026 -
Critical max 9.8SUSE-SU-2026:4969-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…
first Oct 31, 2026 -
Critical max 9.8SUSE-SU-2026:4960-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_opt…
first Oct 31, 2026 -
Critical max 9.6openSUSE-SU-2026:22124-1 293 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 155.0.8059.84 (boo#1285733): * CVE-2026-110922: Use after free in Prerender * CVE-2026-110913: Memory corruption in DOM * CVE-2026-110919: Use after free in V8 * CVE-2026-110…
first Oct 28, 2026