5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:1008-1 5 CVEs
Security update for Prometheus
This update for Prometheus fixes the following issues: golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fi…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:20756-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
first Mar 19, 2026 -
Critical max 9.8SUSE-SU-2026:20751-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).
first Mar 18, 2026 -
Critical max 9.8SUSE-SU-2026:0992-1 10 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 24, 2026 -
Critical max 10.0openSUSE-SU-2026:10413-1 38 CVEs
firefox-esr-140.9.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:0997-1 9 CVEs
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 24, 2026 -
Critical max 9.8openSUSE-SU-2026:10418-1 1 CVE
python311-jsonpath-ng-1.8.0-1.1 on GA media
These are all security issues fixed in the python311-jsonpath-ng-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:0983-1 10 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.153 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 23, 2026 -
Critical max 9.1openSUSE-SU-2026:10419-1 1 CVE
rclone-1.73.3-1.1 on GA media
These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Critical max 9.1SUSE-SU-2026:0977-1 5 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to go 1.25.8 (bsc#1244485, jsc#SLE-18320): - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: C…
first Mar 23, 2026 -
Critical max 9.1openSUSE-SU-2026:10415-1 8 CVEs
glances-common-4.5.2-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Critical max 9.1SUSE-SU-2026:0975-1 3 CVEs
Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2026-27962: JWS `deserialize_compact()` allows for signature bypass by accepting user-controlled embedded JWK as verification key (bsc#1259738). - CVE-2026-28490: cryptographic padding oracle in…
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0953-1 9 CVEs
Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0951-1 8 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-4025…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0946-1 7 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: c…
first Mar 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-39748: bpf: Forget rang…
first Mar 23, 2026 -
Critical max 9.3openSUSE-SU-2026:10408-1 19 CVEs
freerdp-3.24.1-1.1 on GA media
These are all security issues fixed in the freerdp-3.24.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
Critical max 9.1openSUSE-SU-2026:10407-1 1 CVE
azure-storage-azcopy-10.32.2-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
Critical max 10.0SUSE-SU-2026:0972-1 7 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0970-1 8 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0967-1 6 CVEs
Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-p…
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0964-1 7 CVEs
Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-p…
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0961-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163). - CVE-2023-53827: Bl…
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0958-1 9 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0954-1 9 CVEs
Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0939-1 9 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: s…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0945-1 4 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0944-1 6 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix u…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0943-1 7 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: c…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0941-1 8 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-4025…
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0940-1 9 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488:…
first Mar 22, 2026 -
Critical max 9.8openSUSE-SU-2026:20374-1 1 CVE
Security update for krb5-appl
This update for krb5-appl fixes the following issues: Changes in krb5-appl: - CVE-2026-32746: Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd LINEMODE (bsc#1259691)
first Mar 17, 2026 -
Critical max 10.0openSUSE-SU-2026:20365-1 37 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.8.0 ESR (bsc#1258568) - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free in the JavaScript: GC c…
first Mar 16, 2026 -
Critical max 9.8openSUSE-SU-2026:20340-1 2 CVEs
Security update for cJSON
This update for cJSON fixes the following issues: - Update to version 1.7.19 * Check for NULL in cJSON_DetachItemViaPointer. * Check overlap before calling strcpy in cJSON_SetValuestring. * Fix Max recursion depth for cJSON_Duplicate to prevent stack exhausti…
first Mar 11, 2026 -
Critical max 9.8openSUSE-SU-2026:20339-1 44 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: Update to version 3.22.0 (jsc#PED-15526): + Major bugfix release: * Complete overhaul of SDL client * Introduction of new WINPR_ATTR_NODISCARD macro wrapping compiler or C language version specific [[nodisca…
first Mar 10, 2026 -
Critical max 9.1openSUSE-SU-2026:20308-1 19 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: - Update to version 1.24.13 (jsc#SLE-18320) - CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information. (bsc#1251255) - CVE-2025-61725: net/mail: excessive CPU consu…
first Mar 3, 2026 -
Critical max 9.1openSUSE-SU-2026:20301-1 18 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: - Update to version 1.25.7 (jsc#SLE-18320) - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821) - CVE-2025-68119: cmd/go: unexpected code e…
first Mar 3, 2026 -
Critical max 9.8openSUSE-SU-2026:20287-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Critical max 9.2openSUSE-SU-2026:20261-1 1 CVE
Security update for openQA, os-autoinst, openQA-devel-container
This update for openQA, os-autoinst, openQA-devel-container fixes the following issues: Changes in openQA: - Update to version 5.1771422749.560a3b26: * fix(mcp): set navbar check expression to read-only * feat: support inverted result filters in /tests/overvi…
first Feb 23, 2026 -
Critical max 9.8openSUSE-SU-2026:20239-1 3 CVEs
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2026-25547: Fixed an unbounded brace range expansion leading to excessive CPU and memory consumption. (bsc#1257841) - CVE-2026-1615: Fixed arbitrary code injection due to un…
first Feb 17, 2026