12,597 results · Clear filters · Feed
-
High max 8.7SUSE-SU-2026:23831-1 7 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authenticat…
first Sep 14, 2026 -
High max 7.7SUSE-SU-2026:23830-1 7 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs e…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:23829-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:23797-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 16, 2026 -
High max 7.0SUSE-SU-2026:23796-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] - split all plugins into…
first Sep 16, 2026 -
High max 7.5SUSE-SU-2026:23794-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712). - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (bsc#1274792). - CVE…
first Sep 16, 2026 -
High max 7.8SUSE-SU-2026:23789-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 16, 2026 -
High max 7.5SUSE-SU-2026:23788-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712). - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (bsc#1274792). - CVE…
first Sep 16, 2026 -
High max 7.0SUSE-SU-2026:23787-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] - split all plugins into…
first Sep 16, 2026 -
High max 7.8SUSE-SU-2026:23777-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:23742-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 16, 2026 -
High max 7.7SUSE-SU-2026:23738-1 7 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs e…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:23737-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:23764-1 2 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 15, 2026 -
High max 8.2SUSE-SU-2026:23740-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:23739-1 7 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854: golang.org/x/crypto/ssh: authentication bypass and deadlocks in…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:23736-1 7 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authenticat…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21956-1 2 CVEs
Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - Adding missing CVE references already fixed in the past: CVE-2026-77568 bsc#1281638, CVE-2026-68914 bsc#1281637.
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:21954-1 1 CVE
Security update for osmo-iuh
This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iu_client: reject oversized RANAP NAS-PDU (boo#1281607).
first Sep 23, 2026 -
High max 7.5openSUSE-SU-2026:21945-1 20 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…
first Sep 24, 2026 -
High max 8.7openSUSE-SU-2026:21940-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 23, 2026 -
High max 7.8openSUSE-SU-2026:21939-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 23, 2026 -
High max 8.2openSUSE-SU-2026:21938-1 7 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 23, 2026 -
High max 8.8openSUSE-SU-2026:21935-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write (bsc#1248078).
first Sep 23, 2026 -
High max 8.7openSUSE-SU-2026:21933-1 8 CVEs
Security update for sdbootutil
This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270192). - CVE-2026-41677: out-of-bounds read in PEM password callback w…
first Sep 23, 2026 -
High max 8.7openSUSE-SU-2026:21927-1 6 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Fix potential authentication bypass and deadlocks in the crypto/ssh library by updating golang.org/x/crypto to v0.56.0. CVE-2026-56854,CVE-2026-78662,CVE-2026-56855 (bsc#1278666) - …
first Sep 21, 2026 -
High max 7.5openSUSE-SU-2026:21918-1 4 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updating to v4.7.1 with the following changes * wwctl power no longer falls back to the local BMC for nodes with no ipmi: ipaddr:, which could power off the Warewulf server itself *…
first Sep 18, 2026 -
High max 7.8openSUSE-SU-2026:21915-1 1 CVE
Security update for budgie-backgrounds
This update for budgie-backgrounds fixes the following issues: Changes in budgie-backgrounds: - Convert images to JXL, add submission format policy, drop jhead dep because of CVE-2025-44906 (bsc#1243819)
first Sep 17, 2026 -
High max 7.1openSUSE-SU-2026:21912-1 1 CVE
Security update for python-PyMuPDF
This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-82035: a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py (bsc#1280486)
first Sep 22, 2026 -
High max 8.9openSUSE-SU-2026:21909-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 22, 2026 -
High max 7.5openSUSE-SU-2026:21908-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Sep 22, 2026 -
High max 7.9openSUSE-SU-2026:21905-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
High max 8.7openSUSE-SU-2026:21903-1 11 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…
first Sep 22, 2026 -
High max 8.2openSUSE-SU-2026:21902-1 4 CVEs
Security update for zstd-jni
This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…
first Sep 21, 2026 -
High max 7.6openSUSE-SU-2026:21901-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 21, 2026 -
High max 7.5openSUSE-SU-2026:21900-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 21, 2026 -
High max 7.4openSUSE-SU-2026:21891-1 3 CVEs
Security update for ant
This update for ant fixes the following issues: - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats (bsc#1188469). - CVE-2025-7962: jakarta: improper neutralization of \r and \n UTF-8 characters can …
first Sep 20, 2026 -
High max 7.0openSUSE-SU-2026:21890-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21888-1 1 CVE
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow unauthenticated denial of service (bsc#1273354).
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21887-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738). - CVE-2026-81666: integer overflow in check_memb_commit_token_sanity may bypass me…
first Sep 20, 2026