12,602 results · Clear filters · Feed
-
High max 8.7SUSE-SU-2026:0900-1 1 CVE
Security update for python-black
This update for python-black fixes the following issue: - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).
first Mar 13, 2026 -
High max 7.5SUSE-SU-2026:0846-1 1 CVE
Security update for python-Markdown
This update for python-Markdown fixes the following issue: - CVE-2025-69534: incomplete markup declaration in raw HTML can crash applications that process untrusted Markdown (bsc#1259256).
first Mar 6, 2026 -
High max 7.5SUSE-SU-2026:20008-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Dec 22, 2025 -
High max 7.5SUSE-SU-2026:20007-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Dec 22, 2025 -
High max 7.8SUSE-SU-2026:0748-1 1 CVE
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 2, 2026 -
High max 7.8SUSE-SU-2026:0745-1 1 CVE
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.42 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 2, 2026 -
High max 8.8SUSE-SU-2026:0740-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: update to NSS 3.112.3: * CVE-2026-2781: Avoid integer overflow in platform-independent ghash (bsc#1258568)
first Mar 2, 2026 -
High max 7.8SUSE-SU-2026:0727-1 3 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-afte…
first Mar 1, 2026 -
High max 7.8SUSE-SU-2026:0725-1 3 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-after…
first Mar 1, 2026 -
High max 7.8SUSE-SU-2026:0713-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.94 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-after…
first Mar 1, 2026 -
High max 7.8SUSE-SU-2026:0711-1 3 CVEs
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-afte…
first Feb 28, 2026 -
High max 8.5SUSE-SU-2026:0685-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts (bsc#1258746). - CVE-2026-21863: denial of service vi…
first Feb 27, 2026 -
High max 8.8SUSE-SU-2026:0692-1 1 CVE
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to Thunderbird 140.7.2 - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. (bsc#1258231)
first Feb 27, 2026 -
High max 7.5SUSE-SU-2026:0690-1 4 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…
first Feb 27, 2026 -
High max 7.5SUSE-SU-2026:0689-1 4 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…
first Feb 27, 2026 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2021-0920: net: split out functions related to registering inflight socket files (bsc#1193731). - CVE-2025-38177: sch_hfsc: make…
first Feb 27, 2026 -
High max 7.8SUSE-SU-2026:0684-1 4 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-2044: lack of proper initialization of memory can allow remote attackers to execute arbitrary code (bsc#1258532). - CVE-2026-2045: check offset in the colormap is valid before using it (bsc#1258533).…
first Feb 27, 2026 -
High max 8.7SUSE-SU-2026:0683-1 14 CVEs
Security update for freerdp2
This update for freerdp2 fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can le…
first Feb 27, 2026 -
High max 7.5SUSE-SU-2026:0680-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr (bsc#1256822, BZ #33802) - CVE-2025-15281: posix: Reset wordexp_t fields with WRDE_REUSE (bsc#1257005, BZ #33814) - CVE-2025-8058: posix: Fix doubl…
first Feb 27, 2026 -
High max 7.8SUSE-SU-2026:0674-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Feb 27, 2026 -
High max 7.2SUSE-SU-2026:0670-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…
first Feb 26, 2026 -
High max 7.2SUSE-SU-2026:0668-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…
first Feb 26, 2026 -
High max 7.2SUSE-SU-2026:0669-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…
first Feb 26, 2026 -
High max 7.5SUSE-SU-2026:0665-1 9 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2025-61099: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252838) - CVE-2025-61100: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252829) -…
first Feb 26, 2026 -
High max 7.5SUSE-SU-2026:0659-1 1 CVE
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-30204: Fixed a vulnerability in jwt-go which allowed excessive memory allocation during header parsing. (bsc#1240513)
first Feb 26, 2026 -
High max 7.5SUSE-SU-2026:0658-1 4 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…
first Feb 26, 2026 -
High max 7.5SUSE-SU-2026:0657-1 4 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: ou…
first Feb 26, 2026 -
High max 7.7SUSE-SU-2026:0656-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can lea…
first Feb 26, 2026 -
High max 8.8SUSE-SU-2026:0602-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox 140.7.1 ESR - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. (bsc#1258231)
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0589-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: buffer overrun with shadow paging + tracing (XSA-477) (bsc#1256745). - CVE-2026-23553: incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747).
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0588-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Update to version 16.12. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0586-1 4 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: Update to version 17.8. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0585-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0584-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.3SUSE-SU-2026:0583-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Feb 20, 2026 -
High max 8.6SUSE-SU-2026:0579-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection (bsc#1257440). - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read…
first Feb 19, 2026 -
High max 8.6SUSE-SU-2026:0574-1 3 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bou…
first Feb 18, 2026 -
High max 7.8SUSE-SU-2026:0566-1 3 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 17, 2026 -
High max 7.7SUSE-SU-2026:0559-1 8 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). - CVE-2026-22854: server-controlled read length is used to read file data into an IRP outpu…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0561-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…
first Feb 16, 2026