12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:2326-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2325-1 2 CVEs
Security update for kubernetes1.26
This update for kubernetes1.26 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2324-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2308-1 12 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues - CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in `DefaultHttpRequest.setUri()` (bsc#1264350). - CVE-2026-42578: HTTP H…
first Jun 9, 2026 -
High max 8.1SUSE-SU-2026:2307-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).
first Jun 9, 2026 -
High max 8.4SUSE-RU-2026:2237-1 3 CVEs
Recommended update for aazure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-translation-text, python-azure-appconfiguration, python-azure-appconfiguration-provider, python-azure-batch, python-azure-cognitiveservices-anomalydetector, python-azure-cognitiveservices-knowledge-qnamaker, python-azure-cognitiveservices-l
This update for azure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-transla…
first Jun 8, 2026 -
High max 7.5openSUSE-SU-2026:20908-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 5, 2026 -
High max 7.6openSUSE-SU-2026:20907-1 5 CVEs
Security update for erlang
This update for erlang fixes the following issues - CVE-2025-4748: improper limitation of a pathname may lead to path traversal (bsc#1244642). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc…
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
High max 7.8SUSE-SU-2026:22037-1 3 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). - CVE-2026-31406: xfrm: Fix w…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23437: net: shaper: protect late read …
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22026-1 4 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-o…
first Jun 3, 2026 -
High max 7.7SUSE-SU-2026:22016-1 4 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2026-25833: mbedtls: buffer overflow in the `x509_inet_pton_ipv6()` function (bsc#1261476). - CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client …
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22015-1 8 CVEs
Security update for rsync
This update for rsync fixes the following issues - CVE-2025-10158: Out of bounds array access via negative index (bsc#1254441). - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (use chroot = no) (bsc#1264511). - CVE-2026-41035: count of entries mismatch can le…
first Jun 2, 2026 -
High max 8.2SUSE-SU-2026:22011-1 1 CVE
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 2, 2026 -
High max 8.7SUSE-SU-2026:22005-1 2 CVEs
Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2026-31812: quinn-proto: denial of service via crafted QUIC initial packet (bsc#1259624). - CVE-2026-32766: astral-tokio-tar: malformed PAX extensions can lead to archive misinterpretation (bsc#12599…
first Jun 1, 2026 -
High max 8.2SUSE-SU-2026:22003-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22001-1 2 CVEs
Security update for helm
This update for helm fixes the following issues Security issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-41888: github.com/distribution/distribution/v3: tag d…
first May 30, 2026 -
High max 7.5SUSE-SU-2026:22000-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issue - CVE-2026-42198: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (bsc#1264174).
first May 29, 2026 -
High max 7.5openSUSE-SU-2026:20909-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23437: net: shaper: protect late read …
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 2, 2026 -
High max 7.8SUSE-SU-2026:22036-1 2 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). - CVE-2026-31406: xfrm: Fix w…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-46300: FragNesia attack: another xfrm/…
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22024-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via recursive <use> element amplification (bsc#1259690).
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22022-1 2 CVEs
Security update for memcached
This update for memcached fixes the following issues - CVE-2026-47783: timing side-channel in SASL password database authentication (username) (bsc#1265873). - CVE-2026-47784: timing side-channel in SASL password database authentication (password) (bsc#126588…
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22020-1 1 CVE
Security update for busybox
This update for busybox fixes the following issue - CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client (bsc#1263989).
first Jun 2, 2026 -
High max 7.5SUSE-SU-2026:22004-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issue - CVE-2026-42304: Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression (bsc#1265265).
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:21999-1 2 CVEs
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-40347: crafted `multipart/form-data` can cause a denial of service (bsc#1262403). - CVE-2026-42561: denial of service vulnerability in multipart part header parsing (bsc#1265250).
first May 29, 2026 -
High max 7.4openSUSE-SU-2026:10973-1 1 CVE
python3-oslo.messaging-doc-18.1.0-1.1 on GA media
These are all security issues fixed in the python3-oslo.messaging-doc-18.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 8, 2026 -
High max 7.3openSUSE-SU-2026:10969-1 1 CVE
perl-IO-Compress-2.220.0-2.1 on GA media
These are all security issues fixed in the perl-IO-Compress-2.220.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 8, 2026 -
High max 7.5openSUSE-SU-2026:10968-1 1 CVE
perl-CryptX-0.89.0-2.1 on GA media
These are all security issues fixed in the perl-CryptX-0.89.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 8, 2026 -
High max 7.5openSUSE-SU-2026:10965-1 3 CVEs
ack-3.10.0-1.1 on GA media
These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 8, 2026 -
High max 7.5openSUSE-SU-2026:10964-1 1 CVE
libsofia-sip-ua-glib3-1.13.17+50-1.1 on GA media
These are all security issues fixed in the libsofia-sip-ua-glib3-1.13.17+50-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 5, 2026 -
High max 8.8openSUSE-SU-2026:10961-1 1 CVE
ggml-devel-9500-1.1 on GA media
These are all security issues fixed in the ggml-devel-9500-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 5, 2026