12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:4238-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
-
High max 7.5SUSE-SU-2026:2834-2 8 CVEs
Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…
first Sep 13, 2026 -
High max 8.7SUSE-SU-2026:4217-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). - CVE-202…
first Sep 16, 2026 -
High max 8.7SUSE-SU-2026:4213-1 2 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). - CVE-202…
-
High max 7.8SUSE-SU-2026:4207-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
-
High max 8.2SUSE-SU-2026:4201-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
-
High max 7.8SUSE-SU-2026:4211-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
-
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
-
High max 8.7SUSE-SU-2026:4206-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
-
High max 7.5SUSE-SU-2026:4202-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738). - CVE-2026-81666: integer overflow in check_memb_commit_token_sanity may bypass me…
-
High max 8.8SUSE-SU-2026:4200-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
-
High max 7.8openSUSE-SU-2026:11790-1 2 CVEs
libmbedcrypto7-2.28.10-5.1 on GA media
These are all security issues fixed in the libmbedcrypto7-2.28.10-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 8.8openSUSE-SU-2026:11788-1 5 CVEs
gvfs-1.60.3-1.1 on GA media
These are all security issues fixed in the gvfs-1.60.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 7.7openSUSE-SU-2026:11787-1 5 CVEs
glibc-2.44-2.1 on GA media
These are all security issues fixed in the glibc-2.44-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4195-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4194-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4193-1 2 CVEs
Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4192-1 1 CVE
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458).
first Sep 15, 2026 -
High max 8.8SUSE-SU-2026:4191-1 3 CVEs
Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-87817: failure to properly validade the git directory location allows attackers to impersonate the git directory using tracked files and execute arbitrary code by placing pre-commit hooks…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4188-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4185-1 2 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4125-1 4 CVEs
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276733). - CVE-2026-84303: google.golang.org/g…
first Sep 11, 2026 -
High max 7.2SUSE-SU-2026:23539-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:23538-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 2, 2026 -
High max 7.1SUSE-SU-2026:23525-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:23523-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:23521-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 4, 2026 -
High max 7.8SUSE-SU-2026:23515-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 2, 2026 -
High max 8.3SUSE-SU-2026:23514-1 12 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Changes for libpng16: - Version update to 1.6.58 (jsc#PED-16190).
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:23513-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 2, 2026 -
High max 8.6openSUSE-SU-2026:21850-1 6 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: Changes in cups-filters: - CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field. A user who controls an IEEE-1284 device ID consumed by `cfIEEE1284Ge…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21849-1 2 CVEs
Security update for kimi-code
This update for kimi-code fixes the following issues: Changes in kimi-code: Update to version 0.42.0: * Add an experimental Updates panel with paginated progress messages from the main agent and subagents, enabled with KIMI_CODE_EXPERIMENTAL_NOTIFY_USER=1 * T…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21846-1 3 CVEs
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: authentication bypass and deadlocks in the crypto/ssh library * Add update-go-crypto.patch to update affected dependency (bsc…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21843-1 3 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: update vendor.tar to fix: * bsc#1279044, CVE-2026-84445 * bsc#1279224, CVE-2026-84304 * bsc#1279320, CVE-2026-84303: cadvisor: google.golang.org/grpc: xDS RBAC HTTP filter implementatio…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21841-1 7 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - upd…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21835-1 4 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-53495: containerd: CRI ExecSync goroutine leak can lead to node-level denial of service (bsc#1280111). - CVE-2026-56854: golang.org/x/crypto/ssh: unenforced source-address restrictions across non-pu…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21834-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4183-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
-
High max 7.5SUSE-SU-2026:4182-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629).
-
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 14, 2026