12,597 results · Clear filters · Feed
-
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:4178-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4176-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:4174-1 9 CVEs
Security update for python39.SUSE_SLE-15-SP3_Update
This update for python39.SUSE_SLE-15-SP3_Update fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CV…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4154-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 14, 2026 -
High max 8.1SUSE-SU-2026:4153-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833): - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bs…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4148-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4168-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4152-1 9 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4147-1 7 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4146-1 10 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4144-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:11781-1 3 CVEs
rz-pm-0.3.6-1.1 on GA media
These are all security issues fixed in the rz-pm-0.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11779-1 1 CVE
mkvtoolnix-101.0-2.1 on GA media
These are all security issues fixed in the mkvtoolnix-101.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 8.8openSUSE-SU-2026:11773-1 112 CVEs
kernel-devel-7.2.5-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:11772-1 1 CVE
gitea-tea-0.16.0-1.1 on GA media
These are all security issues fixed in the gitea-tea-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11771-1 9 CVEs
gimp-3.2.6-1.1 on GA media
These are all security issues fixed in the gimp-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11770-1 1 CVE
chirp-20260911-1.1 on GA media
These are all security issues fixed in the chirp-20260911-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 8.1SUSE-SU-2026:4107-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833): - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bs…
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:4106-1 1 CVE
Security update for golang-github-vpenso-prometheus_slurm_exporter
This update for golang-github-vpenso-prometheus_slurm_exporter fixes the following issue: - CVE-2022-21698: github.com/prometheus/client_golang/prometheus/promhttp: Denial of service using InstrumentHandlerCounter (bsc#1248703). Changes for golang-github-vpen…
first Sep 9, 2026 -
High max 7.1SUSE-SU-2026:23475-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.8SUSE-SU-2026:23460-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…
first Sep 2, 2026 -
High max 7.2SUSE-SU-2026:23449-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:4095-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/userauth…
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:4115-1 11 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360). - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Lea…
first Sep 9, 2026 -
High max 7.1SUSE-SU-2026:23499-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
High max 7.5SUSE-SU-2026:23466-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 3, 2026 -
High max 7.8SUSE-SU-2026:23445-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:23444-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 2, 2026 -
High max 8.3SUSE-SU-2026:23414-1 5 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: Update to c-ares 1.34.8. - CVE-2025-31498: use-after-free in `read_answers()` when `process_answer()` may re-enqueue a query (bsc#1240955). - CVE-2025-62408: use-after-free due to connection being cleaned up …
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:4078-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4077-1 9 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134). - CVE-2026-15166: Denial of S…
first Sep 8, 2026 -
High max 8.8SUSE-SU-2026:4087-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838). - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839). - CVE-2026-79603: unconditionally do TLB flushing…
first Sep 8, 2026 -
High max 7.8SUSE-SU-2026:4083-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with l…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4079-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4076-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725).
first Sep 8, 2026 -
High max 8.8SUSE-SU-2026:4090-1 18 CVEs
Security update for xen
This update for xen fixes the following issues: Update to version 4.20.3 (jsc#PED-8907). Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buff…
first Sep 8, 2026 -
High max 8.8SUSE-SU-2026:4089-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838). - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).
first Sep 8, 2026 -
High max 8.8SUSE-SU-2026:4088-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838). - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839). - CVE-2026-79603: unconditionally do TLB flushing…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4086-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record (bsc#1278084).
first Sep 8, 2026