12,602 results · Clear filters · Feed
-
High max 7.0SUSE-SU-2026:0212-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0211-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418) - CVE-2026-0719: Fixed overflow for passw…
first Jan 22, 2026 -
High max 8.8SUSE-SU-2026:0204-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-402…
first Jan 21, 2026 -
High max 8.8SUSE-SU-2026:0200-1 5 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50367: fs: fix…
first Jan 21, 2026 -
High max 7.5SUSE-SU-2026:0198-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2025-63757: Fixed integer overflow in yuv2ya16_X_c_template() (bsc#1255392).
first Jan 21, 2026 -
High max 8.3SUSE-SU-2026:0196-1 5 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45231: Fixed out of bounds read when handling a ND Redirect message with truncated options (bsc#1218881). - CVE-2023-45232: Fixed infinite loop when parsing unknown options in the Destination Options…
first Jan 21, 2026 -
High max 8.8SUSE-SU-2026:0185-1 4 CVEs
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50490: b…
first Jan 20, 2026 -
High max 8.8SUSE-SU-2026:0154-1 9 CVEs
Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242). - CVE…
first Jan 19, 2026 -
High max 8.6SUSE-SU-2026:0151-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upsteram update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 19, 2026 -
High max 8.8SUSE-SU-2026:0147-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6_4_0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-4020…
first Jan 17, 2026 -
High max 7.3SUSE-SU-2026:0090-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251984). - CVE-2025-38257: s390/p…
first Jan 12, 2026 -
High max 7.8SUSE-SU-2026:0083-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-15059: Fixed Heap-based Buffer Overflow Remote Code Execution Vulnerability in GIMP PSP File Parsing (bsc#1255766).
first Jan 9, 2026 -
High max 7.5SUSE-SU-2026:0039-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-6505: qemu-kvm: virtio-net: Fixed queue index out-of-bounds access in software RSS (bsc#1227397) - CVE-2025-12464: net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002) - CVE-2025…
first Jan 6, 2026 -
High max 7.5SUSE-SU-2026:0028-1 3 CVEs
Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251509). - CVE-2025-47913: golang.org…
first Jan 5, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Jan 5, 2026 -
High max 8.3SUSE-SU-2026:0019-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…
first Jan 5, 2026 -
High max 8.3SUSE-SU-2026:0020-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…
first Jan 5, 2026 -
High max 7.7SUSE-SU-2026:0018-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0017-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555)
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0014-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination …
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0011-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0013-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2025:4526-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination …
first Dec 26, 2025 -
High max 7.1SUSE-SU-2025:4494-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160) - CVE-2025-66293: Fixed LIBPNG out-of-bounds read in `png_image_read_composite` (bsc#125…
first Dec 19, 2025 -
High max 7.0SUSE-SU-2025:4491-1 6 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.5.29. Release notes and changelog: - https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/ - https://mariadb.com/kb/en/mariadb-10-5-29-changelog/ - https://mariadb.com/kb/en/mariadb-1…
first Dec 19, 2025 -
High max 7.5SUSE-SU-2025:4490-1 1 CVE
Security update for xen
This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them (bsc#1252692). Other i…
first Dec 19, 2025 -
High max 8.8SUSE-SU-2025:4139-1 173 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix n…
first Nov 19, 2025 -
High max 8.4SUSE-SU-2026:20123-1 5 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out of bounds read (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client proc…
first Jan 22, 2026 -
High max 8.1SUSE-SU-2026:0555-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.11 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sun…
first Feb 16, 2026 -
High max 9.8SUSE-SU-2025:4126-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232).
first Nov 18, 2025 -
High max 8.1
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …
first Feb 16, 2026 -
High max 8.3openSUSE-SU-2025:15262-1 1 CVE
podman-5.5.2-1.1 on GA media
These are all security issues fixed in the podman-5.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 3, 2025 -
High max 7.5SUSE-SU-2026:0430-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902)
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0360-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0341-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.30+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0252-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed Denial-of-Service issue that may lead to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets (bsc#1256902)
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0332-1 4 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2…
first Jan 29, 2026 -
High max 8.2SUSE-SU-2026:0280-1 7 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD pack…
first Jan 23, 2026 -
High max 8.4SUSE-SU-2026:0273-1 1 CVE
Security update for azure-cli-core
This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fix improper neutralization of special elements used in a command which allows an unauthorized attacker to elevate privileges locally. (bsc#1239460)
first Jan 23, 2026 -
High max 8.9SUSE-SU-2026:0255-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331)
first Jan 22, 2026