12,597 results · Clear filters · Feed
-
High max 8.1openSUSE-SU-2026:11407-1 1 CVE
rsyslog-8.2606.0-1.1 on GA media
These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
High max 7.5openSUSE-SU-2026:11404-1 1 CVE
warewulf4-4.7.0-4.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11398-1 2 CVEs
tekton-cli-0.45.1-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.45.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11397-1 1 CVE
jupyter-bqplot-jupyterlab-0.5.46-15.1 on GA media
These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-15.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.7openSUSE-SU-2026:11395-1 4 CVEs
nsd-4.14.3-1.1 on GA media
These are all security issues fixed in the nsd-4.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.7openSUSE-SU-2026:11394-1 19 CVEs
netty-4.1.136-1.1 on GA media
These are all security issues fixed in the netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.8openSUSE-SU-2026:11393-1 1 CVE
logcli-3.7.4-1.1 on GA media
These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11392-1 3 CVEs
kubevirt1.8-container-disk-1.8.4-3.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.7openSUSE-SU-2026:11385-1 3 CVEs
freerdp-3.30.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.30.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3338-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3337-1 1 CVE
Security update for wget
This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix (bsc#1272219, bsc#1271033).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3332-1 9 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.12+8 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - C…
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3336-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue: - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3335-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3334-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue: - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in `parse_date` when processing specially crafted date strings (bsc#1271705).
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:3331-1 9 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.4+7 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - CV…
first Jul 28, 2026 -
High max 8.1SUSE-SU-2026:3329-1 2 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-42055: heap-based buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules (bsc#1268492). - CVE-2026-48142: heap buffer over-read in the `ngx_http_charset_module` module (…
first Jul 28, 2026 -
High max 7.5SUSE-SU-2026:22953-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
High max 8.1SUSE-SU-2026:22951-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:22944-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
High max 8.1SUSE-SU-2026:22943-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
High max 8.4SUSE-SU-2026:22942-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
High max 8.4SUSE-SU-2026:22938-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
High max 7.5SUSE-SU-2026:22937-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 23, 2026 -
High max 7.5SUSE-SU-2026:22928-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 22, 2026 -
High max 8.8SUSE-SU-2026:3376-1 1 CVE
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3372-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3367-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3366-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3365-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3364-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3363-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3362-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3344-1 3 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: K…
-
High max 7.5SUSE-SU-2026:3341-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
-
High max 7.5SUSE-SU-2026:3339-1 4 CVEs
Security update for apache-sshd
This update for apache-sshd fixes the following issues: Update to upstream version 2.19.0. Security issues fixed: - CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a path traversal issue in the `sshd-scp` c…
-
High max 7.8SUSE-SU-2026:3245-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding (bsc#1264962). - CVE-2026-8328: server-supplied PASV host address is trust…
first Jul 24, 2026 -
High max 8.4SUSE-SU-2026:3237-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780. - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrar…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3236-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 24, 2026