12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:23578-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 8.8SUSE-SU-2026:23577-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
High max 7.8SUSE-SU-2026:23575-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the `as-user` option in the `org.freedesktop.UDisks2.Filesystem.Mount()` D-Bus method can lead to local privilege escalation (bsc#1274430).
first Aug 30, 2026 -
High max 8.8SUSE-SU-2026:23574-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 3.0.6~git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted oversized LDAP UNBIND packet (bsc#1270695). - CVE-2026-11611: unboun…
first Aug 30, 2026 -
High max 7.1SUSE-SU-2026:23571-1 3 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Aug 30, 2026 -
High max 8.7SUSE-SU-2026:23570-1 3 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS#7 `EnvelopedData` decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (bsc#1273551). - CVE-2026-69248: verifier accepts wildcard DNS names …
first Aug 30, 2026 -
High max 8.8SUSE-SU-2026:23562-1 4 CVEs
Security update for dhcpcd
This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service (bsc#1268980). - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte sta…
first Aug 30, 2026 -
High max 8.7SUSE-SU-2026:23561-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893:…
first Aug 30, 2026 -
High max 8.6SUSE-SU-2026:23552-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
High max 8.7SUSE-SU-2026:23546-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278270). - CVE-2026-84304: …
first Sep 9, 2026 -
High max 8.1SUSE-SU-2026:4379-1 28 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.6.8: - CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). - CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). - CVE-2026-19696: Ixia IxVeriWave and Vector Inf…
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4377-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4375-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
High max 7.5SUSE-SU-2026:4372-1 3 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278681) - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established ch…
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4370-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
High max 7.7SUSE-SU-2026:4355-1 31 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2025-23085: memory leak when remote peer abruptly closes socket without sending GOAWAY notification (bsc#1236250). - CVE-2025-23166: improper error handling in async cryptographic operations crashes p…
first Sep 28, 2026 -
High max 7.5SUSE-SU-2026:4143-1 9 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4141-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:23876-1 4 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56854,CVE-2026-56855,CVE-…
first Sep 18, 2026 -
High max 7.6SUSE-SU-2026:23875-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 18, 2026 -
High max 8.2SUSE-SU-2026:23873-1 18 CVEs
Security update for jq
This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd() function (bsc#976992). - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in `decNumberToString` (bsc#1218034)…
first Sep 17, 2026 -
High max 7.8SUSE-SU-2026:23814-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:23729-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:23708-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 7.9SUSE-SU-2026:23870-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
High max 8.7SUSE-SU-2026:23869-1 11 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…
first Sep 22, 2026 -
High max 8.2SUSE-SU-2026:23868-1 4 CVEs
Security update for zstd-jni
This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…
first Sep 21, 2026 -
High max 7.5SUSE-SU-2026:23867-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 21, 2026 -
High max 7.6SUSE-SU-2026:23866-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 21, 2026 -
High max 7.9SUSE-SU-2026:23861-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
High max 8.7SUSE-SU-2026:23859-1 11 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…
first Sep 22, 2026 -
High max 8.2SUSE-SU-2026:23858-1 4 CVEs
Security update for zstd-jni
This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…
first Sep 21, 2026 -
High max 7.6SUSE-SU-2026:23857-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 21, 2026 -
High max 7.5SUSE-SU-2026:23856-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 21, 2026 -
High max 7.5SUSE-SU-2026:23850-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738). - CVE-2026-81666: integer overflow in check_memb_commit_token_sanity may bypass me…
first Sep 20, 2026 -
High max 8.2SUSE-SU-2026:23845-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE…
first Sep 16, 2026 -
High max 7.8SUSE-SU-2026:23844-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 16, 2026 -
High max 7.5SUSE-SU-2026:23841-1 3 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278597). - CVE-2026-56855: golang.org/x/crypto/ssh: authentication bypass and deadl…
first Sep 15, 2026 -
High max 8.2SUSE-SU-2026:23840-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:23839-1 2 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 15, 2026