12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2026:20128-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114). - CVE-2025-6199: uninitialized mem…
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20125-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: - Update to 3.13.11: - Security - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount…
first Jan 22, 2026 -
High max 8.4SUSE-SU-2026:20116-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376). - CVE-2025-9566: kube play command may overwrite host f…
first Jan 21, 2026 -
High max 7.8
Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Jan 20, 2026 -
High max 7.5SUSE-SU-2026:20109-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.8SUSE-SU-2026:20108-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
High max 8.4SUSE-SU-2026:20103-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376). - CVE-2025-9566: kube play command may overwrite host f…
first Jan 21, 2026 -
High max 7.8
Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Jan 20, 2026 -
High max 7.5SUSE-SU-2026:20094-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2026:20093-1 2 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…
first Jan 13, 2026 -
High max 7.5SUSE-SU-2026:20092-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2026:20091-1 2 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…
first Jan 13, 2026 -
High max 7.5SUSE-SU-2026:20089-1 3 CVEs
Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251509). - CVE-2025-58190: golang.org…
first Jan 15, 2026 -
High max 8.6SUSE-SU-2026:20085-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - Upgrade to release 9.20.15 Security Fixes: * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379) * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380) * CVE-2025-…
first Jan 15, 2026 -
High max 8.3SUSE-SU-2026:20081-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME), unintended retry intervals (bsc#1254511) - CVE-2025-58098: Fixed Server Side Includes adds query string to #exec cmd (bsc#1254512) - CVE-2025-65082: Fixed CGI environme…
first Jan 14, 2026 -
High max 7.8SUSE-SU-2026:20080-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
High max 8.1SUSE-SU-2026:20077-1 2 CVEs
Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries (bsc#1252399) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#124901…
first Jan 13, 2026 -
High max 7.7SUSE-SU-2026:20074-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …
first Jan 12, 2026 -
High max 7.1SUSE-SU-2026:20073-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20072-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20071-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 12, 2026 -
High max 8.1SUSE-SU-2026:20061-1 4 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update OpenvSwitch to v3.1.7 and OVN to v23.03.3: Security issues fixed: - CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets (bsc#1219465). - …
first Jan 8, 2026 -
High max 7.5SUSE-SU-2026:20057-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference (bsc#1253177). - CVE-2025-62689: Fixed heap-based buffer overflow(bsc#1253178).
first Jan 2, 2026 -
High max 7.4SUSE-SU-2026:20055-1 2 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 22.11.10. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network…
first Dec 30, 2025 -
High max 8.2SUSE-SU-2026:20053-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: flaw in HTTP header handling can lead to host header parsing discrepancy between servers and proxies and allow for request smuggling, cache poisoning and bypass of access controls (bsc#1254…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20051-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Jan 12, 2026 -
High max 8.1SUSE-SU-2026:20049-1 4 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update OpenvSwitch to v3.1.7 and OVN to v23.03.3. Security issues fixed: - CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets (bsc#1219465). - …
first Jan 9, 2026 -
High max 7.7SUSE-SU-2026:20045-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-13601: Fixed Integer overflow in in g_escape_uri_string() (bsc#1254297) - CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption (bsc#1254662) - CVE-2025-14512: Fixed Int…
first Jan 8, 2026 -
High max 7.5SUSE-SU-2026:20043-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: Fixed missing validation of the supplied reason phrase (bsc#1254903) - CVE-2025-67725: Fixed inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905) - CVE…
first Jan 8, 2026 -
High max 7.5SUSE-SU-2026:20038-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 8.2.10. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the …
first Jan 6, 2026 -
High max 8.3SUSE-SU-2026:20037-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45229: integer underflow and out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (bsc#1218879). - CVE-2023-45230: out-of-bounds write in the DHCPv6 client through a l…
first Dec 30, 2025 -
High max 7.4SUSE-SU-2026:20036-1 2 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 22.11.10. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network…
first Dec 30, 2025 -
High max 7.5SUSE-SU-2026:20035-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: lack of message size validation when SSH Agent server is processing new identity requests can lead to out-of-bounds read and an application panic (bsc#1253993). - CVE-2025-47913: receiving a…
first Dec 30, 2025 -
High max 7.7SUSE-SU-2026:20032-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …
first Jan 12, 2026 -
High max 7.1SUSE-SU-2026:20030-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20029-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20028-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 12, 2026 -
High max 8.8SUSE-SU-2026:20019-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
first Jan 2, 2026 -
High max 7.0SUSE-SU-2026:20018-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 11.8.5: * CVE-2025-13699: Fixed Directory Traversal Remote Code Execution Vulnerability (bsc#1254313) Other fixes: - Add %license tags to license files (bsc#1252162) - Add INSTALL_DOCREADMEDIR cm…
first Dec 22, 2025 -
High max 8.8SUSE-SU-2026:20014-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
first Jan 2, 2026