12,597 results · Clear filters · Feed
-
High max 7.2SUSE-SU-2026:22910-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Jul 21, 2026 -
High max 8.4SUSE-SU-2026:22901-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrary…
first Jul 22, 2026 -
High max 7.1SUSE-SU-2026:22900-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22898-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 22, 2026 -
High max 8.8SUSE-SU-2026:22897-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22895-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 22, 2026 -
High max 7.8SUSE-SU-2026:22888-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).
first Jul 21, 2026 -
High max 8.8SUSE-SU-2026:3248-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ip…
first Jul 25, 2026 -
High max 7.5SUSE-SU-2026:3239-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3235-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 24, 2026 -
High max 8.7SUSE-SU-2026:22921-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openssl…
first Jul 24, 2026 -
High max 8.8openSUSE-SU-2026:11384-1 1 CVE
ffmpeg-7-7.1.5-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 27, 2026 -
High max 8.8openSUSE-SU-2026:11383-1 4 CVEs
chromedriver-150.0.7871.186-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.186-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 27, 2026 -
High max 7.8SUSE-SU-2026:3253-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
first Jul 25, 2026 -
High max 7.5SUSE-SU-2026:3240-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3238-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Jul 24, 2026 -
High max 8.7SUSE-SU-2026:22917-1 13 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2022-24713: regex: high complexity when parsing regexes with large repetitions on empty sub-expressions can lead to DoS (bsc#1196972). - …
first Jul 23, 2026 -
High max 7.3SUSE-SU-2026:22886-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when process…
first Jul 21, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…
first Jul 20, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…
first Jul 16, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…
first Jul 15, 2026 -
High max 7.5SUSE-SU-2026:22863-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 23, 2026 -
High max 8.1SUSE-SU-2026:22861-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG …
first Jul 22, 2026 -
High max 7.5SUSE-SU-2026:22859-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parse_date (bsc#1271705).
first Jul 22, 2026 -
High max 7.5SUSE-SU-2026:22856-1 2 CVEs
Security update for jline3
This update for jline3 fixes the following issues: - CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet `NEW-ENVIRON` variables (bsc#1269021). - CVE-2026-56741: unauthenticated remote DoS via Unbounded Telnet NAWS Terminal Geometry …
first Jul 22, 2026 -
High max 7.5SUSE-SU-2026:22846-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22841-1 7 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270542). - CVE-2026-41678: openssl: incorrect bounds asse…
first Jul 22, 2026 -
High max 7.7SUSE-SU-2026:22836-1 1 CVE
Security update for radvd
This update for radvd fixes the following issue - CVE-2026-48715: crafted ICMPv6 Router Advertisement can lead to a stack-based buffer overflow (bsc#1268641). Changes for radvd: - Update to version 2.21. * feat: RFC8319 support: Increase max AdvDefaultLifetim…
first Jul 21, 2026 -
High max 7.5SUSE-SU-2026:22830-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Jul 20, 2026 -
High max 8.7SUSE-SU-2026:22827-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-4167…
first Jul 20, 2026 -
High max 8.4SUSE-SU-2026:22821-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping (bsc#1271194). - CVE-2026-59857: out-of-bounds write in SAL soundfol…
first Jul 18, 2026 -
High max 8.8SUSE-SU-2026:22817-1 9 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12891: unchecked aspect_ratio_idc value used as an array index in the H.266 parser could cause a global out- of-bounds read (bsc#1268872). - CVE-2026-12892: 1-byte heap out-of-bounds …
first Jul 18, 2026 -
High max 8.7SUSE-SU-2026:22801-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:22799-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 17, 2026 -
High max 8.4SUSE-SU-2026:22797-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrary…
first Jul 17, 2026 -
High max 7.3SUSE-SU-2026:22796-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when proces…
first Jul 17, 2026 -
High max 8.8SUSE-SU-2026:3299-1 6 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-52720: invalid check of total area instead of individual dimensions could trigger …
first Jul 27, 2026 -
High max 8.1SUSE-SU-2026:3298-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 27, 2026 -
High max 7.5SUSE-SU-2026:3297-1 1 CVE
Security update for python-msgpack-python
This update for python-msgpack-python fixes the following issue: - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
first Jul 27, 2026 -
High max 7.7SUSE-SU-2026:3291-1 3 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE…
first Jul 27, 2026