12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:2851-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.570.g2b84048d7: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jul 10, 2026 -
High max 7.6SUSE-SU-2026:2842-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).
first Jul 10, 2026 -
High max 7.8openSUSE-SU-2026:11243-1 2 CVEs
traefik2-2.11.52-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.52-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 7.5openSUSE-SU-2026:11240-1 1 CVE
python313-websockets-16.0-2.1 on GA media
These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 8.8openSUSE-SU-2026:11242-1 28 CVEs
spectre-meltdown-checker-26.36.0602723-1.1 on GA media
These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 8.8openSUSE-SU-2026:11241-1 3 CVEs
rclone-1.74.4-1.1 on GA media
These are all security issues fixed in the rclone-1.74.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 8.7openSUSE-SU-2026:11238-1 3 CVEs
python313-pypdf-6.14.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 8.7openSUSE-SU-2026:11237-1 4 CVEs
python313-maturin-1.14.1-1.1 on GA media
These are all security issues fixed in the python313-maturin-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 8.5openSUSE-SU-2026:11233-1 3 CVEs
libXfont2-2-2.0.7-2.1 on GA media
These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 7.8openSUSE-SU-2026:11232-1 2 CVEs
go1.26-1.26.5-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 7.5openSUSE-SU-2026:11231-1 1 CVE
flannel-0.28.7-1.1 on GA media
These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 7.5openSUSE-SU-2026:11229-1 1 CVE
MozillaFirefox-152.0.4-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2026 -
High max 7.5SUSE-SU-2026:2835-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…
first Jul 9, 2026 -
High max 7.5SUSE-SU-2026:2833-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2832-1 10 CVEs
Security update for rustup
This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). - …
first Jul 9, 2026 -
High max 7.6SUSE-SU-2026:2829-1 4 CVEs
Security update for libaom
This update for libaom fixes the following issues: - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-plane pixel values c…
first Jul 9, 2026 -
High max 7.5SUSE-SU-2026:2834-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2831-1 11 CVEs
Security update for rustup
This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). - …
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2826-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2825-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…
first Jul 9, 2026 -
High max 7.8SUSE-SU-2026:2817-1 5 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…
first Jul 9, 2026 -
High max 8.2SUSE-SU-2026:2822-1 12 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and SANs (bsc#1257960). - CVE-2026-3833: incorrectly accep…
first Jul 9, 2026 -
High max 7.8SUSE-SU-2026:2818-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111) - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2807-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…
first Jul 9, 2026 -
High max 7.0SUSE-RU-2026:2816-1 1 CVE
Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-
This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-…
first Jul 9, 2026 -
High max 8.7openSUSE-SU-2026:21263-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-49852: HS256/HS384/HS512 verify accepts empty/nil HMAC key (bsc#1270234)
first Jul 6, 2026 -
High max 7.5openSUSE-SU-2026:21262-1 6 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.0.1 (bsc#1269433, CVE-2026-48702): * bump go to 1.26.4 to squash CVE noise * Full v2 Release notes: https://github.com/hauler- dev/hauler/releases/tag/v2.0.0 - update to 2.0.0…
first Jul 6, 2026 -
High max 7.6openSUSE-SU-2026:21240-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2026-53705: wavpackdec: Avoid integer overflow when calculating output buffer size and related fixes (bsc#1268449).
first Jul 6, 2026 -
High max 7.5openSUSE-SU-2026:21239-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).
first Jul 5, 2026 -
High max 7.3SUSE-SU-2026:22523-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:22515-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jul 3, 2026 -
High max 7.8SUSE-SU-2026:21833-1 6 CVEs
Security update for vim
This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes (bsc#1261833). - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in th…
first May 28, 2026 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013). - CVE-2026-46300: net: s…
first May 15, 2026 -
High max 8.8SUSE-SU-2026:21594-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely (bsc#1264450) - CVE-2026-43284: xfrm: esp: avoid in-place decr…
first May 12, 2026 -
High max 7.3SUSE-SU-2026:21518-1 1 CVE
Security update for build, product-composer
This update for build, product-composer fixes the following issues: Changes in build: - Support a new "IgnoreRebuild" config. - build-recipe-kiwi: * Add support for oci containers * Avoid needlessly compressing container images * Detect container images based…
first May 5, 2026 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algif_aead (bsc#1262573).
first May 2, 2026 -
High max 7.5SUSE-SU-2026:20999-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…
first Apr 10, 2026 -
High max 8.4SUSE-SU-2026:20563-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…
first Jan 29, 2026 -
High max 7.1SUSE-RU-2026:21781-1 1 CVE
Recommended update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix one issue The following non security issue was fixed: - CVE-2026-46333: Fixed logic bug in the Linux kernel's __ptrace_may_access() function (bsc#1265308).
first May 18, 2026 -
High max 7.5openSUSE-SU-2026:11221-1 3 CVEs
python313-sqlparse-0.5.5-2.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.5.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026