12,597 results · Clear filters · Feed
-
High max 8.1SUSE-SU-2026:3498-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: parsing of crafted RFC 5424 messages in `mmpstrucdata` can lead to a stack buffer overflow (bsc#1272414). - Configuration-dependent issue in the optional `imptcp` input module can allow an …
first Aug 4, 2026 -
High max 7.5SUSE-SU-2026:3497-1 1 CVE
Security update for google-guest-agent
This update for google-guest-agent fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input containing invalid UTF-8 bytes can lead to infinite loop (bsc#1272118).
first Aug 4, 2026 -
High max 7.5SUSE-SU-2026:3496-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input containing invalid UTF-8 bytes can lead to infinite loop (bsc#1272118).
first Aug 4, 2026 -
High max 8.8openSUSE-SU-2026:21520-1 7 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3484-1 4 CVEs
Security update for bind
This update for bind fixes the following issues - CVE-2026-11622: Potential memory usage beyond configured limits (bsc#1271986). - CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987). - CVE-2026-13204: Une…
-
High max 8.8SUSE-SU-2026:3483-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues - CVE-2026-56684: use-after-free in TLS connection handling (bsc#1272443). - CVE-2026-63639: RCE via corrupt stream RDB files containing a shared NACK across consumers (bsc#1272442). Changes for valkey: - Upda…
-
High max 8.8SUSE-SU-2026:22982-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:22981-1 2 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:22980-1 2 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
High max 7.7SUSE-SU-2026:22978-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an attacker-controlled server (bsc#1271044). - CVE-2026-59996: scp: file placed in the pa…
first Jul 29, 2026 -
High max 8.8SUSE-SU-2026:22977-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths witho…
first Jul 29, 2026 -
High max 8.8SUSE-SU-2026:22963-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22962-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22961-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3462-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Aug 3, 2026 -
High max 7.8SUSE-SU-2026:3468-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 3, 2026 -
High max 8.1SUSE-SU-2026:3460-1 1 CVE
Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by `Screen.start()` are not cryptographically secure (bsc#1271868).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3456-1 1 CVE
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed (bsc#1272214).
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3477-1 6 CVEs
Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: Potential memory usage beyond configured limit…
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11440-1 11 CVEs
nodejs26-26.5.1-1.1 on GA media
These are all security issues fixed in the nodejs26-26.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3454-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in `parse_date` when processing specially crafted date strings (bsc#1271705).
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3453-1 11 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - …
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3452-1 8 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones (bsc#1271982). - CVE-2026-10822: storing a DNS key recor…
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:3451-1 14 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Aug 3, 2026 -
High max 7.8SUSE-SU-2026:3449-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 3, 2026 -
High max 8.1SUSE-SU-2026:3448-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues: - CVE-2026-42055: heap buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules (bsc#1268492). - CVE-2026-42533: heap buffer overflow in the `map` directive and regex matching (bsc#…
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11439-1 11 CVEs
corepack24-24.18.1-1.1 on GA media
These are all security issues fixed in the corepack24-24.18.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 7.2SUSE-SU-2026:3475-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Aug 3, 2026 -
High max 7.2SUSE-SU-2026:3474-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Aug 3, 2026 -
High max 8.8openSUSE-SU-2026:11441-1 12 CVEs
xen-4.22.0_02-1.1 on GA media
These are all security issues fixed in the xen-4.22.0_02-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 7.5openSUSE-SU-2026:11438-1 5 CVEs
alloy-1.18.0-1.1 on GA media
These are all security issues fixed in the alloy-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 3, 2026 -
High max 8.6SUSE-SU-2026:3476-1 6 CVEs
Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: Potential memory usage beyond configured limit…
first Aug 3, 2026 -
High max 8.1SUSE-SU-2026:3469-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue: - CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow (bsc#1271514).
first Aug 3, 2026 -
High max 8.4SUSE-SU-2026:3458-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding …
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:3443-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issue: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
first Jul 31, 2026 -
High max 8.1SUSE-SU-2026:3442-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issue: - CVE-2026-61548: parsing of crafted RFC 5424 messages in `mmpstrucdata` can lead to a stack buffer overflow (bsc#1272414).
first Jul 31, 2026 -
High max 8.1SUSE-SU-2026:3441-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
first Jul 31, 2026 -
High max 7.5openSUSE-SU-2026:11437-1 1 CVE
podman-6.0.2-1.1 on GA media
These are all security issues fixed in the podman-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2026 -
High max 7.5openSUSE-SU-2026:21510-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: Changes in perl-Date-Manip: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063) - CVE-2026-60075: CPU exhausti…
first Jul 31, 2026 -
High max 7.5openSUSE-SU-2026:21509-1 1 CVE
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated golang.org/x/text to v0.40.0 to fix CVE-2026-56852 (bsc#1272014)
first Jul 31, 2026