12,597 results · Clear filters · Feed
-
High max 8.6SUSE-SU-2026:1367-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 11.8.6. - https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6 - https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6 Security issues fixed: - CVE-2…
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1366-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 15, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0. Security issues fixed: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted…
first Apr 15, 2026 -
High max 7.6SUSE-SU-2026:1368-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…
first Apr 15, 2026 -
High max 7.0SUSE-SU-2026:1354-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: - Update to v3.13.13 - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader …
first Apr 15, 2026 -
High max 8.7SUSE-SU-2026:1353-1 2 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: Upidate to 4.1.132: - CVE-2026-33870: incorrectly parses quoted strings in HTTP/1.1 can lead to request smuggling (bsc#1261031). - CVE-2026-33871: sending a flood of CONTINUATION frames can lea…
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1351-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues: - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for …
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1369-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1350-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Apr 15, 2026 -
High max 8.5SUSE-SU-2026:1360-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 15, 2026 -
High max 7.4SUSE-SU-2026:1359-1 1 CVE
Security update for sudo
This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
first Apr 15, 2026 -
High max 7.0SUSE-SU-2026:1345-1 5 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: python: improper resource argument validation can allow path traversal…
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1363-1 7 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to version 20.20.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…
first Apr 15, 2026 -
High max 8.7SUSE-SU-2026:1337-1 1 CVE
Security update for rust1.92
This update for rust1.92 fixes the following issues: - CVE-2026-31812: Denial of service via crafted QUIC initial packet (bsc#1259623).
first Apr 15, 2026 -
High max 8.8SUSE-SU-2026:1355-1 2 CVEs
Security update for rubygem-bundler
This update for rubygem-bundler fixes the following issues: Updated to version 2.2.34. - CVE-2020-36327: Bundler chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen (bsc#1185…
first Apr 15, 2026 -
High max 7.8SUSE-SU-2026:1342-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#12…
first Apr 15, 2026 -
High max 7.8SUSE-SU-2026:1332-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:1333-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:1330-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:1361-1 7 CVEs
Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 2.3.9+git0.a9fd29b; (jsc#PED-14511): - CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324). - CVE-2026-31979: Fix race condition when accessi…
first Apr 15, 2026 -
High max 7.8SUSE-SU-2026:1329-1 5 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerF…
first Apr 14, 2026 -
High max 7.0SUSE-SU-2026:1349-1 15 CVEs
Security update for python311
This update for python311 fixes the following issues: - Updated to Python 3.11.15 - CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables (bsc#1252974). - CVE-2…
first Apr 15, 2026 -
High max 8.1SUSE-SU-2026:1343-1 1 CVE
Security update for Mesa
This update for Mesa fixes the following issue: - CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:1371-1 7 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to version 20.20.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…
first Apr 15, 2026 -
High max 7.8SUSE-SU-2026:1331-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:1328-1 5 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerF…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:1335-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1323-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754).
first Apr 14, 2026 -
High max 8.7SUSE-SU-2026:1313-1 1 CVE
Security update for freerdp2
This update for freerdp2 fixes the following issues: - Fix the CVE-2026-24684 patch, as the previous version wrongly deleted a check for an error condition (bsc#1257991).
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1311-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754).
first Apr 14, 2026 -
High max 7.4SUSE-SU-2026:1309-1 1 CVE
Security update for sudo
This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
first Apr 14, 2026 -
High max 7.4SUSE-SU-2026:1308-1 1 CVE
Security update for sudo
This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1307-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue: - CVE-2026-25075: integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Apr 14, 2026 -
High max 8.5SUSE-SU-2026:1303-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
High max 8.5SUSE-SU-2026:1302-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
High max 8.5SUSE-SU-2026:1301-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
High max 7.5SUSE-SU-2026:1312-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21088-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21087-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21086-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026