12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:2372-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). Changes for google-cloud-sap-agent: - Update to version 3.14 (bs…
first Jun 11, 2026 -
High max 8.1SUSE-SU-2026:2370-1 7 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215). - CVE-2026-27651: denial of service via undisclosed requests when the `…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2368-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712). - CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717). - CVE-2026-35330: i…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2367-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets h…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2366-1 3 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets h…
first Jun 11, 2026 -
High max 8.1SUSE-SU-2026:2364-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
first Jun 11, 2026 -
High max 8.8SUSE-SU-2026:2354-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2353-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2350-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2349-1 1 CVE
Security update for wicked
This update for wicked fixes the following issue - CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). Changes for wicked: - Update to version 0.6.79 - Fix to escape single-quotes in leaseinfo dump output used b…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2348-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). Changes for google-cloud-sap-agent: - Update to version 3.14 (bs…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2345-1 2 CVEs
Security update for kubernetes1.25
This update for kubernetes1.25 fixes the following issues: Security fixes: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory a…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2344-1 2 CVEs
Security update for kubernetes1.28
This update for kubernetes1.28 fixes the following issues: Security fixes: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory a…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2343-1 2 CVEs
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2342-1 2 CVEs
Security update for kubernetes
This update for kubernetes fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265748). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY …
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2340-1 2 CVEs
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2339-1 2 CVEs
Security update for kubernetes1.27
This update for kubernetes1.27 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2337-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2335-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2334-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
High max 8.1openSUSE-SU-2026:20919-1 4 CVEs
Security update for agama-web-ui
This update for agama-web-ui fixes the following issues - CVE-2025-7339: on-headers: incorrect array handling may lead to HTTP response header manipulation (bsc#1246678). - CVE-2026-9277: shell-quote: improper escaping of newlines in object .op values by quot…
first Jun 8, 2026 -
High max 8.7openSUSE-SU-2026:20918-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554) Other changes in salt: - Use non vendored tornado with Python 3.11 (b…
first Jun 8, 2026 -
High max 7.5openSUSE-SU-2026:10988-1 1 CVE
perl-Protocol-HTTP2-1.130.0-1.1 on GA media
These are all security issues fixed in the perl-Protocol-HTTP2-1.130.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.3openSUSE-SU-2026:10985-1 2 CVEs
libIex-3_4-33-3.4.12-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.4openSUSE-SU-2026:10984-1 2 CVEs
libzypp-17.38.13-1.1 on GA media
These are all security issues fixed in the libzypp-17.38.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.5openSUSE-SU-2026:10983-1 2 CVEs
gdk-pixbuf-loader-libheif-1.23.0-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.3openSUSE-SU-2026:10982-1 1 CVE
graphite2-1.3.15-1.1 on GA media
These are all security issues fixed in the graphite2-1.3.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.1openSUSE-SU-2026:10979-1 2 CVEs
agama-web-ui-21+360.16caae772-44.1 on GA media
These are all security issues fixed in the agama-web-ui-21+360.16caae772-44.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.3openSUSE-SU-2026:10978-1 3 CVEs
SDL3_sound-devel-3.2.0-1.1 on GA media
These are all security issues fixed in the SDL3_sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.5openSUSE-SU-2026:10977-1 2 CVEs
MozillaFirefox-151.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2322-1 2 CVEs
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2316-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Changes for 389-ds: - Update to versi…
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2315-1 2 CVEs
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
High max 7.8SUSE-SU-2026:2313-1 6 CVEs
Security update for vim
This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes (bsc#1261833). - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in th…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2312-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:22046-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:2329-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
-
High max 8.1SUSE-SU-2026:2328-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
-
High max 7.5SUSE-SU-2026:2327-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 9, 2026