12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:3612-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.567.gf5cfeb7f7. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3611-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 055+suse.404.gc96044c. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11509-1 1 CVE
python3-ansible-compat-26.8.0-1.1 on GA media
These are all security issues fixed in the python3-ansible-compat-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11507-1 1 CVE
molecule-26.8.0-1.1 on GA media
These are all security issues fixed in the molecule-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 8.7openSUSE-SU-2026:11505-1 1 CVE
jetty-annotations-9.4.58-5.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.5openSUSE-SU-2026:11504-1 1 CVE
dracut-112+suse.29.gc0c5e1d-1.1 on GA media
These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11503-1 1 CVE
ansible-lint-26.8.0-1.1 on GA media
These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.7SUSE-SU-2026:3605-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - Backported support for the mlkemx25519 key exchange from upstream (jsc#PED-16473). - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an a…
first Aug 13, 2026 -
High max 8.8SUSE-SU-2026:3604-1 1 CVE
Security update for kubevirt
This update for kubevirt fixes the following issue: - CVE-2026-13622: `virt-handler` migration proxy follows symlinks, allowing container escape to host (bsc#1272840).
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3598-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432).
first Aug 12, 2026 -
High max 8.7SUSE-SU-2026:3601-1 11 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:3599-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 055+suse.367.g85633e8. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 12, 2026 -
High max 7.1SUSE-SU-2026:3596-1 7 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: Potential DoS and memory leak via TLS session use-a…
first Aug 12, 2026 -
High max 8.7SUSE-SU-2026:3597-1 4 CVEs
Security update for libheif
This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…
first Aug 12, 2026 -
High max 8.8
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
High max 7.8openSUSE-SU-2026:21558-1 5 CVEs
Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: - Update to 0.56.0: * Fixes CVE-2026-40034 (boo#1266434): the CommandForbiddenInModules trust check could be bypassed in gix_submodule::File::update(), which allowed arbitrary command e…
first Aug 10, 2026 -
High max 7.6openSUSE-SU-2026:21557-1 1 CVE
Security update for gleam
This update for gleam fixes the following issues: Changes in gleam: - Update to 1.18.1: * CVE-2026-59247: insufficient verification of data authenticity allows a MITM adversary to substitute forged Hex package contents during dependency resolution (bsc#127299…
first Aug 10, 2026 -
High max 8.1openSUSE-SU-2026:21553-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
first Aug 11, 2026 -
High max 7.5openSUSE-SU-2026:21552-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21550-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8openSUSE-SU-2026:21549-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21546-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21545-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 8.7openSUSE-SU-2026:21544-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
High max 7.8SUSE-SU-2026:23059-1 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issue: - CVE-2024-4453: lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806).
first Aug 7, 2026 -
High max 7.5SUSE-SU-2026:23053-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buff…
first Aug 4, 2026 -
High max 7.5SUSE-SU-2026:23048-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service (bsc#1268683).
first Aug 3, 2026 -
High max 8.7SUSE-SU-2026:23036-1 8 CVEs
Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: select_next_proto use after free in rust-openssl (bsc#1270429). - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23026-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23012-1 2 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23011-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:23009-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:23006-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity i…
first Jul 28, 2026 -
High max 7.8openSUSE-SU-2026:11501-1 1 CVE
libudisks2-0-2.11.2-1.1 on GA media
These are all security issues fixed in the libudisks2-0-2.11.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
High max 7.3openSUSE-SU-2026:11494-1 1 CVE
clusterctl-1.14.0-1.1 on GA media
These are all security issues fixed in the clusterctl-1.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
High max 7.5openSUSE-SU-2026:11496-1 1 CVE
musescore-4.7.4-1.1 on GA media
These are all security issues fixed in the musescore-4.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 11, 2026 -
High max 8.7SUSE-SU-2026:3576-1 8 CVEs
Security update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update
This update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update fixes the following issues: Security fixes: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270182). - CVE-2026-41677: openssl:…
first Aug 11, 2026 -
High max 8.2SUSE-SU-2026:3572-1 1 CVE
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting (XSS) via HTML injection in the error page component (bsc#1272769).
first Aug 11, 2026 -
High max 8.7SUSE-SU-2026:3577-1 3 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274139). - CVE-2026-41678: openssl: incorrect bounds assertion in AES keywrap can lead to an …
first Aug 11, 2026