12,597 results · Clear filters · Feed
-
High max 7.0openSUSE-SU-2026:20517-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
High max 8.1openSUSE-SU-2026:20525-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 8.8openSUSE-SU-2026:20487-1 2 CVEs
Security update for zlib
This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:21221-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 13, 2026 -
High max 7.5openSUSE-SU-2026:20579-1 1 CVE
Security update for gosec
This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.25.0: * chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617) * fix: allow barry action to access secrets on fork PRs (#1616) * fix: reduce G117 false p…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:21220-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21219-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 13, 2026 -
High max 7.8SUSE-SU-2026:21218-1 3 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilte…
first Apr 13, 2026 -
High max 7.5openSUSE-SU-2026:20496-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 (bsc#1244485): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html…
first Apr 16, 2026 -
High max 8.8SUSE-SU-2026:21217-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 11, 2026 -
High max 7.8SUSE-SU-2026:21216-1 5 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 10, 2026 -
High max 8.2SUSE-SU-2026:21224-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:21212-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).
first Apr 17, 2026 -
High max 7.8SUSE-SU-2026:21211-1 5 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerF…
first Apr 17, 2026 -
High max 7.7SUSE-SU-2026:21208-1 10 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894). - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended fi…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21209-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:21203-1 2 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access (bsc#1257359). - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472). Changes for strongswan: - Fixed a vulne…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21195-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21194-1 1 CVE
Security update for plexus-utils
This update for plexus-utils fixes the following issue: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588).
first Apr 14, 2026 -
High max 7.5openSUSE-SU-2026:20513-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026 -
High max 8.7SUSE-SU-2026:21191-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 14, 2026 -
High max 8.1SUSE-SU-2026:21186-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 8.2openSUSE-SU-2026:20506-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature ve…
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:21181-1 9 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted reques…
first Apr 13, 2026 -
High max 7.5SUSE-SU-2026:21204-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: - Update to release 9.20.21 - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence …
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:21178-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
High max 8.1openSUSE-SU-2026:20489-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:21200-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 (bsc#1244485): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21173-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:21164-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…
first Apr 10, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…
first Apr 13, 2026 -
High max 8.2SUSE-SU-2026:21165-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature ve…
first Apr 10, 2026 -
High max 7.5openSUSE-SU-2026:20581-1 1 CVE
Security update for nebula
This update for nebula fixes the following issues: Changes in nebula: - Update to version 1.10.3: * Fix an issue where blocklist bypass is possible when using curve P256 Any newly issued P256 based certificates will have their signature clamped to the low-s f…
first Apr 14, 2026 -
High max 8.1SUSE-SU-2026:21153-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18
first Apr 9, 2026 -
High max 7.5openSUSE-SU-2026:20537-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Apr 14, 2026 -
High max 8.7openSUSE-SU-2026:20528-1 1 CVE
Security update for Botan
This update for Botan fixes the following issues: - CVE-2026-34582: Fixed a client authentication bypass in TLS 1.3 implementation (bsc#1261880)
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21151-1 2 CVEs
Security update for zlib
This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:21142-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Apr 7, 2026 -
High max 8.7SUSE-SU-2026:21141-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issue: Update cockpit-packages to version 4: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (…
first Apr 7, 2026 -
High max 7.5openSUSE-SU-2026:20547-1 2 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access (bsc#1257359). - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472). Changes for strongswan: - Fixed a vulne…
first Apr 16, 2026