12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:0787-1 1 CVE
Security update for postgresql17
This update for postgresql17 fixes the following issue: Update to version 17.9 (bsc#1258754). Regression fixes: - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database …
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0786-1 4 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.22 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: int…
first Mar 3, 2026 -
High max 7.4SUSE-SU-2026:0766-1 1 CVE
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issue: - CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053).
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0785-1 1 CVE
Security update for postgresql18
This update for postgresql18 fixes the following issue: Update to version 18.3 (bsc#1258754). Regression fixes: - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database …
first Mar 3, 2026 -
High max 8.8SUSE-SU-2026:0784-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issue: Update to version 16.13 (bsc#1258754). Regression fixes: - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database…
first Mar 3, 2026 -
High max 8.7SUSE-SU-2026:0763-1 11 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-24491: heap-use-after-free in video_timer (bsc#1257981). - CVE-2026-24675: heap-use-after-free in urb_select_interface (bsc#1257982). - CVE-2026-24676: heap-use-after-free in audio_format_compatib…
first Mar 3, 2026 -
High max 8.7SUSE-SU-2026:0762-1 11 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can lea…
first Mar 3, 2026 -
High max 7.0SUSE-SU-2026:0759-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163). - CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated …
first Mar 3, 2026 -
High max 7.0SUSE-SU-2026:0758-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163). - CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated …
first Mar 3, 2026 -
High max 8.4SUSE-SU-2026:20536-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-0861: inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766). - CVE-2026-0915: uninitialized stack buffer used as DNS query name when net==0 in _nss_dns_getnetby…
first Mar 2, 2026 -
High max 7.7SUSE-SU-2026:0761-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can lea…
first Mar 3, 2026 -
High max 7.8SUSE-SU-2026:0734-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256097). - CVE-2025-38129: page_pool: fix u…
first Mar 1, 2026 -
High max 7.8SUSE-SU-2026:0731-1 3 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-afte…
first Mar 1, 2026 -
High max 8.7SUSE-SU-2026:0648-1 2 CVEs
Security update for libjxl
This update for libjxl fixes the following issues: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory (bsc#1258090). - CVE-2026-1837: a specially crafted file can cause the decoder to write …
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0641-1 1 CVE
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-30204: Fixed a vulnerability in jwt-go which allowed excessive memory allocation during header parsing. (bsc#1240513)
first Feb 25, 2026 -
High max 8.9SUSE-SU-2026:0635-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0631-1 3 CVEs
Security update 5.1.2 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Backported security patches for Salt vendored tornado: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1…
first Feb 25, 2026 -
High max 8.6SUSE-SU-2026:0630-1 2 CVEs
Security update 5.1.2 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 1.1.0 * Retry DHCP requests up to 3 times (bsc#1253004) golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization around source building golang-github-boynux-…
first Feb 25, 2026 -
High max 7.5openSUSE-SU-2026:10255-1 2 CVEs
docker-stable-24.0.9_ce-17.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-17.1 package on the GA media of openSUSE Tumbleweed.
first Feb 25, 2026 -
High max 8.7SUSE-SU-2026:0649-1 8 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-24491: heap-use-after-free in video_timer (bsc#1257981). - CVE-2026-24675: heap-use-after-free in urb_select_interface (bsc#1257982). - CVE-2026-24676: heap-use-after-free in audio_format_compatib…
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0629-1 3 CVEs
Security update 5.1.2 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Backport security patches for Salt vendored tornado: * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905) * …
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0627-1 3 CVEs
Security update 5.1.2 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization around source building golang-github-lusitaniae-apache_exporter: - Build without apparmor for openSUSE Leap 16, SLES 16 or newer - Requir…
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0626-1 3 CVEs
Security update 5.1.2 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization around source building golang-github-lusitaniae-apache_exporter: - Build without apparmor for openSUSE Leap 16, SLES 16 or newer - Requir…
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0625-1 3 CVEs
Security update 5.1.2 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization around source building golang-github-lusitaniae-apache_exporter: - Build without apparmor for openSUSE Leap 16, SLES 16 or newer - Requir…
first Feb 25, 2026 -
High max 8.6SUSE-SU-2026:0628-1 2 CVEs
Security update 5.1.2 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization around source building golang-github-boynux-squid_exporter: - Update to version 1.13.0 (jsc#PED-14971) - Add support for squid-internal-m…
first Feb 25, 2026 -
High max 7.5SUSE-SU-2026:0623-1 2 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905). - CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPH…
first Feb 25, 2026 -
High max 8.7SUSE-SU-2026:0621-1 7 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-24491: heap-use-after-free in video_timer (bsc#1257981). - CVE-2026-24675: heap-use-after-free in urb_select_interface (bsc#1257982). - CVE-2026-24676: heap-use-after-free in audio_format_compatib…
first Feb 24, 2026 -
High max 8.2SUSE-SU-2026:0618-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues:i - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0616-1 4 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0615-1 4 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0614-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Update to version 16.12. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0611-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox 140.7.1 ESR - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. (bsc#1258231)
first Feb 24, 2026 -
High max 8.3SUSE-SU-2026:0599-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Feb 23, 2026 -
High max 8.3SUSE-SU-2026:0598-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Feb 23, 2026 -
High max 8.3SUSE-SU-2026:0597-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Feb 23, 2026 -
High max 8.3SUSE-SU-2026:0596-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365). - CVE-2026-22695: heap buffer over-read in png_image_finish_read (…
first Feb 23, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 16, 2026 -
High max 8.2SUSE-SU-2026:0563-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).
first Feb 16, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).…
first Feb 15, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu…
first Feb 15, 2026