12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:1478-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to version 22.22.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…
first Apr 20, 2026 -
High max 8.0SUSE-SU-2026:1458-1 2 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged loc…
first Apr 19, 2026 -
High max 8.0SUSE-SU-2026:1463-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …
first Apr 20, 2026 -
High max 7.4openSUSE-SU-2026:10573-1 2 CVEs
cpp-httplib-devel-0.42.0-1.1 on GA media
These are all security issues fixed in the cpp-httplib-devel-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
High max 7.4openSUSE-SU-2026:10574-1 2 CVEs
jetty-annotations-9.4.58-4.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
High max 7.5openSUSE-SU-2026:10577-1 1 CVE
skopeo-1.22.1-1.1 on GA media
These are all security issues fixed in the skopeo-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
High max 8.7openSUSE-SU-2026:10575-1 1 CVE
python311-Pillow-12.2.0-2.1 on GA media
These are all security issues fixed in the python311-Pillow-12.2.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
High max 7.5openSUSE-SU-2026:10578-1 1 CVE
tempo-cli-2.10.4-1.1 on GA media
These are all security issues fixed in the tempo-cli-2.10.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 18, 2026 -
High max 7.5SUSE-SU-2026:1431-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1430-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1428-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1429-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
first Apr 17, 2026 -
High max 7.3openSUSE-SU-2026:10568-1 1 CVE
opam-2.5.1-1.1 on GA media
These are all security issues fixed in the opam-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1421-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via recursive <use> element amplification (bsc#1259690).
first Apr 17, 2026 -
High max 7.0SUSE-SU-2026:1417-1 5 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#1259…
first Apr 16, 2026 -
High max 8.7SUSE-SU-2026:21111-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 14, 2026 -
High max 8.1SUSE-SU-2026:21107-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 7.0SUSE-SU-2026:21104-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
High max 7.8SUSE-SU-2026:21102-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 13, 2026 -
High max 7.8SUSE-SU-2026:21098-1 3 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilte…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21096-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 11, 2026 -
High max 7.5SUSE-SU-2026:21095-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026 -
High max 7.8SUSE-SU-2026:21100-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21099-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 13, 2026 -
High max 8.8openSUSE-SU-2026:10562-1 1 CVE
flannel-0.28.4-1.1 on GA media
These are all security issues fixed in the flannel-0.28.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 7.5openSUSE-SU-2026:10561-1 1 CVE
firecracker-1.15.1-1.1 on GA media
These are all security issues fixed in the firecracker-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 8.7SUSE-SU-2026:1415-1 1 CVE
Security update for rust1.93
This update for rust1.93 fixes the following issues: Security issue: - CVE-2026-31812: denial of service via crafted QUIC initial packet (bsc#1259623). Non security issue: - Resolve missing gcc requirement that may affect some crate buildin (bsc#1253321).
first Apr 16, 2026 -
High max 8.9SUSE-SU-2026:1412-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues: - CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866). - CVE-2025-66471: excessive resource consumption via decompression of hig…
first Apr 16, 2026 -
High max 8.8SUSE-SU-2026:1396-1 1 CVE
Security update for plexus-utils
This update for plexus-utils fixes the following issue: Security fixes: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588). Update to version 4.0.2: * Bug Fixes + Specify /D for cmd.exe to byp…
first Apr 16, 2026 -
High max 8.2SUSE-SU-2026:1394-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1400-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1378-1 1 CVE
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.5: * A large number of bracket pairs in a JSON payload directed to any endpoint would result in a stack overflow, due to recursive calls when parsing the JSON. This has been fixed. (CVE-202…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1389-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 16, 2026 -
High max 8.1SUSE-SU-2026:1386-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:1385-1 5 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#125…
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:1376-1 5 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3479: improper resource argument val…
first Apr 15, 2026 -
High max 8.1SUSE-SU-2026:1375-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: …
first Apr 15, 2026 -
High max 7.8openSUSE-SU-2026:10556-1 5 CVEs
xorg-x11-server-21.1.21-5.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.21-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026 -
High max 8.4openSUSE-SU-2026:10555-1 1 CVE
libsdb2_4_2-6.1.4-1.1 on GA media
These are all security issues fixed in the libsdb2_4_2-6.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026 -
High max 7.8openSUSE-SU-2026:10557-1 5 CVEs
xwayland-24.1.9-2.1 on GA media
These are all security issues fixed in the xwayland-24.1.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026