12,597 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:1239-1 8 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:1222-1 6 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:20461-1 2 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to dnsdist 1.9.11: - CVE-2025-8671: add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852). - CVE-2025-30187: denial of service via crafted DoH exchange (bsc#1250054).
first Apr 2, 2026 -
High max 8.7SUSE-SU-2026:20973-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
High max 8.7SUSE-SU-2026:20967-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
High max 7.4openSUSE-SU-2026:10510-1 1 CVE
sudo-1.9.17p2-2.1 on GA media
These are all security issues fixed in the sudo-1.9.17p2-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10508-1 9 CVEs
ruby4.0-rubygem-rack-2.2-2.2.23-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rack-2.2-2.2.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.9openSUSE-SU-2026:10507-1 1 CVE
python311-lupa-2.7-1.1 on GA media
These are all security issues fixed in the python311-lupa-2.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10504-1 7 CVEs
corepack24-24.14.1-1.1 on GA media
These are all security issues fixed in the corepack24-24.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1214-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10506-1 1 CVE
jupyter-jupyterlab-templates-0.5.3-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.8SUSE-SU-2026:1212-1 6 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1213-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.5SUSE-SU-2026:1209-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 8, 2026 -
High max 8.7openSUSE-SU-2026:10505-1 8 CVEs
libIex-3_4-33-3.4.9-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.3openSUSE-SU-2026:10502-1 1 CVE
dcmtk-3.7.0-2.1 on GA media
These are all security issues fixed in the dcmtk-3.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1215-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.2openSUSE-SU-2026:10500-1 1 CVE
389-ds-3.1.4+e2562f589-1.1 on GA media
These are all security issues fixed in the 389-ds-3.1.4+e2562f589-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.7SUSE-SU-2026:1217-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issue: - CVE-2026-24684: Heap-use-after-free in play_thread (bsc#1257991).
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1216-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 8, 2026 -
High max 7.2SUSE-SU-2026:20954-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 1, 2026 -
High max 7.2SUSE-SU-2026:20960-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 1, 2026 -
High max 7.5SUSE-SU-2026:20950-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 27, 2026 -
High max 8.8SUSE-SU-2026:1185-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.19 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 3, 2026 -
High max 7.8SUSE-SU-2026:1180-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 3, 2026 -
High max 8.1SUSE-SU-2026:1203-1 20 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446). - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack …
first Apr 7, 2026 -
High max 7.5openSUSE-SU-2026:10497-1 1 CVE
heroic-games-launcher-2.20.1-5.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 8.9openSUSE-SU-2026:10495-1 1 CVE
ckermit-9.0.302-20.1 on GA media
These are all security issues fixed in the ckermit-9.0.302-20.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 7.1openSUSE-SU-2026:10494-1 1 CVE
SDL2_image-devel-2.8.10-1.1 on GA media
These are all security issues fixed in the SDL2_image-devel-2.8.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 7, 2026 -
High max 7.0SUSE-SU-2026:1206-1 4 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3644: incomplete control character vali…
first Apr 7, 2026 -
High max 8.1SUSE-SU-2026:1202-1 23 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…
first Apr 7, 2026 -
High max 8.1SUSE-SU-2026:1201-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead t…
first Apr 7, 2026 -
High max 7.5SUSE-SU-2026:1199-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 7, 2026 -
High max 7.8SUSE-SU-2026:1193-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-4150: PSD File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1259979). - CVE-2026-4153: PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#125998…
first Apr 7, 2026 -
High max 7.2SUSE-SU-2026:1192-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Apr 7, 2026 -
High max 7.8SUSE-SU-2026:1189-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 5, 2026 -
High max 8.8SUSE-SU-2026:1188-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregist…
first Apr 5, 2026 -
High max 7.8SUSE-SU-2026:1187-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter…
first Apr 5, 2026 -
High max 7.1openSUSE-SU-2026:10493-1 1 CVE
SDL3_image-devel-3.4.2-1.1 on GA media
These are all security issues fixed in the SDL3_image-devel-3.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 5, 2026 -
High max 8.6openSUSE-SU-2026:20458-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. (bsc#1258125)
first Apr 1, 2026