12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:1280-1 6 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.167 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 12, 2026 -
High max 8.8SUSE-SU-2026:1283-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregiste…
first Apr 12, 2026 -
High max 8.8SUSE-SU-2026:1281-1 6 CVEs
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 12, 2026 -
High max 7.8SUSE-SU-2026:1279-1 5 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). …
first Apr 12, 2026 -
High max 8.8SUSE-SU-2026:1278-1 8 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 12, 2026 -
High max 8.1openSUSE-SU-2026:10533-1 7 CVEs
libopenssl-3-devel-3.5.3-4.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.5.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2026 -
High max 8.4openSUSE-SU-2026:10526-1 1 CVE
helm-4.1.4-1.1 on GA media
These are all security issues fixed in the helm-4.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 10, 2026 -
High max 8.1SUSE-SU-2026:1256-1 5 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL deref…
first Apr 10, 2026 -
High max 8.1SUSE-SU-2026:1255-1 4 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 10, 2026 -
High max 7.8SUSE-SU-2026:1254-1 4 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780…
first Apr 10, 2026 -
High max 8.1SUSE-SU-2026:1257-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 10, 2026 -
High max 8.5SUSE-SU-2026:1252-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 10, 2026 -
High max 8.8SUSE-SU-2026:1244-1 8 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 10, 2026 -
High max 8.8SUSE-SU-2026:1248-1 6 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:1247-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Apr 10, 2026 -
High max 8.8SUSE-SU-2026:1242-1 6 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 10, 2026 -
High max 7.5openSUSE-SU-2026:20468-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-68131: CBORDecoder reuse across trust boundaries can lead to leak of shareable values from previous decode calls via attacker-controlled messages (bsc#1255783). - CVE-2026-26209: uncontrolled…
first Apr 7, 2026 -
High max 7.6openSUSE-SU-2026:20466-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…
first Apr 7, 2026 -
High max 8.7openSUSE-SU-2026:20464-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
High max 8.6SUSE-SU-2026:20992-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. (bsc#1258125)
first Apr 1, 2026 -
High max 8.7SUSE-SU-2026:20997-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
High max 7.5SUSE-SU-2026:20995-1 2 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to dnsdist 1.9.11: - CVE-2025-8671: add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852). - CVE-2025-30187: denial of service via crafted DoH exchange (bsc#1250054).
first Apr 2, 2026 -
High max 8.9SUSE-SU-2026:20976-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: g…
first Mar 27, 2026 -
High max 8.8SUSE-FU-2026:20990-1 4 CVEs
Feature update for himmelblau
This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 (jsc#PED-14511): Security issues: - CVE-2025-54882: world readable cloud TGT token (bsc#1247735). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249013). - CV…
first Apr 1, 2026 -
High max 7.5SUSE-SU-2026:20989-1 2 CVEs
Security update for kea
This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert (bsc#1252863). - CVE-2026-3608: stack overflow via maliciously crafted message (bsc#1260380). Changelog: * A large number of bracket pairs in a …
first Apr 1, 2026 -
High max 8.8SUSE-SU-2026:20983-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Update to versio 16.13. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 30, 2026 -
High max 7.5openSUSE-SU-2026:20477-1 1 CVE
Security update for aws-c-event-stream
This update for aws-c-event-stream fixes the following issues: Changes in aws-c-event-stream: - CVE-2026-5190: Fixed a out-of-bounds write caused by crafted event-stream messages (bsc#1261298)
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:20470-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Apr 7, 2026 -
High max 8.5openSUSE-SU-2026:20465-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 7, 2026 -
High max 8.7openSUSE-SU-2026:20469-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issue: Update cockpit-packages to version 4: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (…
first Apr 7, 2026 -
High max 8.2openSUSE-SU-2026:10515-1 1 CVE
libprotobuf-lite34_1_0-32bit-34.1-1.1 on GA media
These are all security issues fixed in the libprotobuf-lite34_1_0-32bit-34.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:1237-1 4 CVEs
Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780…
first Apr 9, 2026 -
High max 8.8openSUSE-SU-2026:10513-1 1 CVE
fontforge-20251009-6.1 on GA media
These are all security issues fixed in the fontforge-20251009-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:1236-1 8 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 9, 2026 -
High max 7.5openSUSE-SU-2026:10512-1 1 CVE
aws-c-event-stream-devel-0.7.0-1.1 on GA media
These are all security issues fixed in the aws-c-event-stream-devel-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:1230-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 9, 2026 -
High max 7.8openSUSE-SU-2026:10519-1 2 CVEs
glances-common-4.5.3-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:1229-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:1225-1 8 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:1231-1 1 CVE
Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes one security issue The following security issue was fixed: - CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
first Apr 9, 2026