12,597 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:20870-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:20839-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issue: Update to PyJWT 2.12.1: - CVE-2026-32597: PyJWT accepts unknown `crit` header extensions (bsc#1259616). Changelog: Update to 2.12.1: - Add missing typing_extensions dependency for Python < 3.11 in #1150 …
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20836-1 2 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb…
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20835-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20830-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb…
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:20833-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 24, 2026 -
High max 8.9SUSE-SU-2026:20871-1 1 CVE
Security update for docker-compose
This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files (bsc#1252752).
first Mar 26, 2026 -
High max 7.8openSUSE-SU-2026:10445-1 2 CVEs
traefik2-2.11.42-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.42-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 27, 2026 -
High max 7.8openSUSE-SU-2026:10444-1 3 CVEs
traefik-3.6.12-1.1 on GA media
These are all security issues fixed in the traefik-3.6.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 27, 2026 -
High max 7.5openSUSE-SU-2026:10443-1 6 CVEs
libsuricata8_0_4-8.0.4-1.1 on GA media
These are all security issues fixed in the libsuricata8_0_4-8.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 27, 2026 -
High max 7.7openSUSE-SU-2026:10442-1 10 CVEs
dovecot24-2.4.3-1.1 on GA media
These are all security issues fixed in the dovecot24-2.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 27, 2026 -
High max 7.8SUSE-SU-2026:1092-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480)
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1093-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480) - CVE-2026-23555: xen: Xenstored DoS by unprivileged domain (bsc#1259248, XSA-481)
first Mar 26, 2026 -
High max 8.7SUSE-SU-2026:1094-1 1 CVE
Security update for python-deepdiff
This update for python-deepdiff fixes the following issues: - CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range (bsc#1260064).
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1091-1 3 CVEs
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.3 (bsc#1243240): - CVE-2025-32801: Fixed loading a malicious hook library can lead to local privilege escalation. - CVE-2025-32802: Fixed insecure handling of file paths allows multiple loc…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:20825-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fix HTTP header paramet…
first Mar 24, 2026 -
High max 8.8openSUSE-SU-2026:10439-1 1 CVE
plexus-utils-4.0.2-2.1 on GA media
These are all security issues fixed in the plexus-utils-4.0.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.7openSUSE-SU-2026:10435-1 6 CVEs
cpp-httplib-devel-0.38.0-1.1 on GA media
These are all security issues fixed in the cpp-httplib-devel-0.38.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.2openSUSE-SU-2026:10440-1 1 CVE
jupyter-nbclassic-1.3.3-1.1 on GA media
These are all security issues fixed in the jupyter-nbclassic-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1077-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2: …
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10437-1 1 CVE
libnghttp2-14-1.68.1-1.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.68.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1075-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10441-1 1 CVE
strongswan-6.0.5-1.1 on GA media
These are all security issues fixed in the strongswan-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1076-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1074-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10436-1 1 CVE
freeipmi-1.6.17-1.1 on GA media
These are all security issues fixed in the freeipmi-1.6.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.8openSUSE-SU-2026:10434-1 8 CVEs
chromedriver-146.0.7680.164-1.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.164-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.9SUSE-SU-2026:1067-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867).
first Mar 26, 2026 -
High max 8.7SUSE-SU-2026:1064-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1065-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1060-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes one security issue The following security issue was fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118).
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1063-1 9 CVEs
Security update for frr
This update for frr fixes the following issues: Security issues: - CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838). - CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829). - CVE-2025-61101: NULL Pointer Dereference in FRRout…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1057-1 9 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838). - CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829). - CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833)…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1056-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 26, 2026 -
High max 8.1SUSE-SU-2026:1068-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18
first Mar 26, 2026 -
High max 8.2openSUSE-SU-2026:20384-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…
first Mar 18, 2026 -
High max 8.7openSUSE-SU-2026:20393-1 1 CVE
Security update for python-simpleeval
This update for python-simpleeval fixes the following issues: Changes in python-simpleeval: - CVE-2026-32640: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox (bsc#1259685)
first Mar 18, 2026 -
High max 8.2openSUSE-SU-2026:20390-1 2 CVEs
Security update for protobuf
This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…
first Mar 18, 2026 -
High max 8.8openSUSE-SU-2026:20388-1 4 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - Update to version 17.9. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 18, 2026 -
High max 7.0openSUSE-SU-2026:20387-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Changes in busybox: - CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. (bsc#1258163) - CVE-2026-26158: Fixed arbitrary file modification and privi…
first Mar 18, 2026