12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:3284-1 11 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - C…
first Jul 27, 2026 -
High max 8.8SUSE-SU-2026:3301-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ip…
first Jul 27, 2026 -
High max 7.5SUSE-SU-2026:3272-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). Changes for openssl-1_0_0: - Security fix: * Fix NULL p…
first Jul 27, 2026 -
High max 8.4SUSE-SU-2026:3271-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780. - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrar…
first Jul 27, 2026 -
High max 8.7SUSE-SU-2026:3268-1 11 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-54059: bomb protection bypass via PCF font loading due to `Image.frombytes()` being call…
first Jul 27, 2026 -
High max 7.5openSUSE-SU-2026:11380-1 24 CVEs
libunbound8-1.25.2-1.1 on GA media
These are all security issues fixed in the libunbound8-1.25.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 8.6openSUSE-SU-2026:11375-1 9 CVEs
bind-9.20.26-1.1 on GA media
These are all security issues fixed in the bind-9.20.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:11374-1 1 CVE
apptainer-1.5.3-1.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:11382-1 1 CVE
yq-4.53.3-1.2 on GA media
These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 8.8openSUSE-SU-2026:11381-1 2 CVEs
valkey-9.1.1-1.1 on GA media
These are all security issues fixed in the valkey-9.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:21440-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
High max 8.1openSUSE-SU-2026:21439-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
High max 7.9openSUSE-SU-2026:11372-1 1 CVE
python313-sh-2.3.0-1.1 on GA media
These are all security issues fixed in the python313-sh-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 8.1openSUSE-SU-2026:11367-1 1 CVE
libnutclient2-2.8.5-2.1 on GA media
These are all security issues fixed in the libnutclient2-2.8.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11366-1 2 CVEs
mcphost-0.34.0-9.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11363-1 9 CVEs
java-25-openjdk-25.0.4.0-1.1 on GA media
These are all security issues fixed in the java-25-openjdk-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11362-1 9 CVEs
java-21-openjdk-21.0.12.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 8.8openSUSE-SU-2026:11360-1 2 CVEs
ffmpeg-4-4.4.8-2.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:21410-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 22, 2026 -
High max 8.7openSUSE-SU-2026:21406-1 7 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270542). - CVE-2026-41678: openssl: incorrect bounds asse…
first Jul 22, 2026 -
High max 7.7openSUSE-SU-2026:21400-1 1 CVE
Security update for radvd
This update for radvd fixes the following issue - CVE-2026-48715: crafted ICMPv6 Router Advertisement can lead to a stack-based buffer overflow (bsc#1268641). Changes for radvd: - Update to version 2.21. * feat: RFC8319 support: Increase max AdvDefaultLifetim…
first Jul 21, 2026 -
High max 7.5openSUSE-SU-2026:21423-1 2 CVEs
Security update for jline3
This update for jline3 fixes the following issues: - CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet `NEW-ENVIRON` variables (bsc#1269021). - CVE-2026-56741: unauthenticated remote DoS via Unbounded Telnet NAWS Terminal Geometry …
first Jul 22, 2026 -
High max 7.5openSUSE-SU-2026:21392-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Jul 20, 2026 -
High max 8.7openSUSE-SU-2026:21386-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-4167…
first Jul 20, 2026 -
High max 8.7
Security update 5.0.8 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554) - CVE-2026-27459: pyOpenSSL: Fixed issue with large …
first Jun 3, 2026 -
High max 7.5
Security update 5.0.8 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security Fixes: - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248707) golang-github-prometheus-node_exporter was updated from version 1.5…
first Jun 3, 2026 -
High max 7.8
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fixed …
first Mar 25, 2026 -
High max 7.8
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 8.8
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security fixes on Python 3.11 interpreter: * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes (bsc#1229873, bsc#1230059) * CVE-2024-8088: Prevent malformed …
first Nov 18, 2024 -
High max 7.7
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (b…
first May 6, 2024 -
High max 7.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501) * CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270) * CVE-2022-461…
first Sep 28, 2023 -
High max 7.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: prometheus-postgres_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208060) - Other non-security issues fixed: * Adapt the systemd service security configuration …
first May 11, 2023 -
High max 8.4openSUSE-SU-2026:21431-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:21430-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:21427-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parse_date (bsc#1271705).
first Jul 22, 2026 -
High max 8.1openSUSE-SU-2026:21426-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG …
first Jul 22, 2026 -
High max 8.1openSUSE-SU-2026:11356-1 1 CVE
python313-urwid-4.0.5-1.1 on GA media
These are all security issues fixed in the python313-urwid-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11355-1 1 CVE
python313-pikepdf-10.5.1-2.1 on GA media
These are all security issues fixed in the python313-pikepdf-10.5.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:11354-1 1 CVE
jupyter-matplotlib-0.11.7-18.1 on GA media
These are all security issues fixed in the jupyter-matplotlib-0.11.7-18.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026 -
High max 8.1openSUSE-SU-2026:11352-1 1 CVE
proftpd-1.3.9c-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.9c-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 23, 2026