12,597 results · Clear filters · Feed
-
High max 7.1SUSE-SU-2026:4082-1 2 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276981). - CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modi…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4073-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725).
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4071-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4069-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4068-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4067-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4066-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4065-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record (bsc#1278084).
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:4063-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 8.7SUSE-SU-2026:4062-1 2 CVEs
Security update for terraform-provider-null
This update for terraform-provider-null fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278269).…
first Sep 8, 2026 -
High max 7.7SUSE-SU-2026:4059-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:4048-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4044-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write (bsc#1248078).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4043-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4042-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory alloca…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4041-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4040-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4038-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4037-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4036-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory alloca…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4034-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:4033-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4031-1 3 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:4025-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4024-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4022-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).
first Sep 7, 2026 -
High max 8.3SUSE-SU-2026:4021-1 6 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: - CVE-2024-25629: out of bounds read in ares__read_line() (bsc#1220279). - CVE-2025-31498: use-after-free in read_answers() when process_answer() may re-enqueue a query (bsc#1240955). - CVE-2025-62408: c-ares…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4020-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#12…
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:4019-1 9 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was upd…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4018-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4017-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4016-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4015-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4014-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4013-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4010-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4009-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4005-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59186: On ILP32, the Array2D<Rgba> tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation (bsc#1276850). - CVE-2026-61…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4004-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4003-1 7 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes (bsc#1276849). - CVE-2026-59186: On ILP32, the Array2D<Rgba> tile-conversion buffer size calculation overflows, allocate…
first Sep 7, 2026