12,602 results · Clear filters · Feed
-
High max 7.1SUSE-SU-2026:0425-1 1 CVE
Security update for python313-wheel
This update for python313-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 11, 2026 -
High max 7.1SUSE-SU-2026:0424-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0415-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Feb 10, 2026 -
High max 7.5SUSE-SU-2026:0414-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.30+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Feb 10, 2026 -
High max 7.8SUSE-SU-2026:0385-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768). - CVE-2022-49545: ALSA: usb-audio: Cancel pen…
first Feb 4, 2026 -
High max 8.1SUSE-SU-2026:0384-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962). - CVE-2026-23952: pr…
first Feb 4, 2026 -
High max 7.5SUSE-SU-2026:0382-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034) - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036) - CVE-2026-21933: Fixed Oracle Java SE …
first Feb 4, 2026 -
High max 7.8SUSE-SU-2026:0378-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: Fixed possile memory corruption in the armor parser [T7906] (bsc#1255715) - Fixed GnuPG Accepting Path Separators and Path Traversals in Literal Data (bsc#1256389) - Fixed Cleartext Signature …
first Feb 4, 2026 -
High max 8.2SUSE-SU-2026:0374-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).
first Feb 4, 2026 -
High max 7.8SUSE-SU-2026:0354-1 5 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260128T190828 2026-01-28T19:08:28Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4338 CVE-2025-68119 CVE-2025-68119 * GO-2026-433…
first Jan 30, 2026 -
High max 8.9SUSE-SU-2026:0367-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …
first Feb 3, 2026 -
High max 7.5SUSE-SU-2026:0363-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.10+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Feb 3, 2026 -
High max 7.5SUSE-SU-2026:0359-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0358-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0356-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-11234: Fixed use-after-free in websocket handshake code can lead to denial of service (bsc#1250984).
first Feb 1, 2026 -
High max 7.8SUSE-SU-2026:0352-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54168: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (bsc#1256053). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unreg…
first Jan 30, 2026 -
High max 8.2SUSE-SU-2026:0344-1 1 CVE
Security update for assertj-core
This update for assertj-core fixes the following issues: Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion (bsc#1257293).
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0343-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0342-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.2+10 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0333-1 4 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0331-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Jan 28, 2026 -
High max 8.8SUSE-SU-2026:0329-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747)
first Jan 28, 2026 -
High max 8.8SUSE-SU-2026:0328-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: …
first Jan 28, 2026 -
High max 8.4SUSE-SU-2026:0327-1 4 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion (bsc#1255333): - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/op…
first Jan 28, 2026 -
High max 8.6SUSE-SU-2026:0307-1 1 CVE
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues: - CVE-2026-24486: Fixed non-default configuration options can lead to path traversal (bsc#1257301).
first Jan 27, 2026 -
High max 8.8SUSE-SU-2026:0304-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747)
first Jan 27, 2026 -
High max 7.5SUSE-SU-2026:0301-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion (bsc#1256848) - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks tha…
first Jan 27, 2026 -
High max 8.2SUSE-SU-2026:0290-1 7 CVEs
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD pac…
first Jan 26, 2026 -
High max 7.5SUSE-SU-2026:0288-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Jan 26, 2026 -
High max 8.6SUSE-SU-2026:0258-1 2 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0257-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418) - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399) - CVE-2025-14523: Reject duplicated Host in headers and followed upstre…
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0253-1 2 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 22, 2026 -
High max 8.8SUSE-SU-2026:0247-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-402…
first Jan 22, 2026 -
High max 7.9SUSE-SU-2026:0232-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-9636: Fixed Cross-Origin Opener Policy (COOP) vulnerability (bsc#1249151).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0229-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2025-63757: Fixed integer overflow in yuv2ya16_X_c_template() (bsc#1255392).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0224-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0222-1 2 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905). - CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPH…
first Jan 22, 2026 -
High max 8.2SUSE-SU-2026:0217-1 1 CVE
Security update for keylime
This update for keylime fixes the following issues: - CVE-2025-13609: avoid re-registration of clients with same UUID but with different TPM identity (bsc#1254199).
first Jan 22, 2026 -
High max 7.8SUSE-SU-2026:0215-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715). - Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246). - Error out on…
first Jan 22, 2026 -
High max 7.0SUSE-SU-2026:0213-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 22, 2026