6,765 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2026:20666-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)
first Mar 11, 2026 -
Medium max 6.3SUSE-SU-2026:20665-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control chara…
first Mar 10, 2026 -
Medium max 6.8SUSE-SU-2026:20661-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
first Mar 10, 2026 -
Medium max 6.2SUSE-SU-2026:20657-1 6 CVEs
Security update for libxslt, libxml2
This update for libxslt, libxml2 fixes the following issues: libxml2: - CVE-2026-0990: call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811) - CVE-2026-0992: excessive resource consu…
first Mar 6, 2026 -
Medium max 5.3SUSE-SU-2026:20654-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in th…
first Mar 5, 2026 -
Medium max 6.9SUSE-SU-2026:20653-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Mar 4, 2026 -
Medium max 5.3SUSE-SU-2026:20651-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: an invalid number of mechanisms may cause unbounded memory consumption (bcs#1253904).
first Mar 4, 2026 -
Medium max 6.2SUSE-SU-2026:20647-1 5 CVEs
Security update for libxml2, libxslt
This update for libxml2, libxslt fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…
first Mar 4, 2026 -
Medium max 6.9SUSE-SU-2026:20642-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
Medium max 6.2SUSE-SU-2026:20631-1 5 CVEs
Security update for libxml2, libxslt
This update for libxml2, libxslt fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…
first Mar 4, 2026 -
Medium max 6.9SUSE-SU-2026:20627-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
Medium max 4.8SUSE-SU-2026:20620-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
Medium max 4.8SUSE-SU-2026:20616-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
Medium max 5.5SUSE-SU-2026:20603-1 1 CVE
Security update for rhino
This update for rhino fixes the following issues: Update to 1.7.15.1: - CVE-2025-66453: Fixed a problem with formatting of floating-point numbers to strings that may result in DoS (bsc#1254481).
first Mar 2, 2026 -
Medium max 5.5SUSE-SU-2026:20592-1 2 CVEs
Security update for 7zip
This update for 7zip fixes the following issues: - Update to 25.01 (boo#1249130) * The code for handling symbolic links has been changed to provide greater security when extracting files from archives * Command line switch -snld20 can be used to bypass defaul…
first Feb 26, 2026 -
Medium max 6.0SUSE-SU-2026:20581-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
Medium max 4.8SUSE-SU-2026:20557-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
Medium max 6.0SUSE-SU-2026:20543-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
Medium max 6.9SUSE-SU-2026:20540-1 2 CVEs
Security update for cockpit-repos
This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325). - CVE-2025-64718: js-y…
first Feb 18, 2026 -
Medium max 5.3SUSE-SU-2026:20539-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).
first Feb 18, 2026 -
Medium max 6.9SUSE-SU-2026:20538-1 1 CVE
Security update for cockpit-machines, cockpit
This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324) Changes in cockpit-machines: - Update to 346 * 346 - Performance improvements - Translation updat…
first Feb 17, 2026 -
Medium max 6.5SUSE-SU-2026:20531-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Feb 26, 2026 -
Medium max 6.8SUSE-SU-2026:20526-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Feb 26, 2026 -
Medium max 6.5SUSE-SU-2026:20524-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049) - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045) - CVE-2026-0966: Buff…
first Feb 26, 2026 -
Medium max 6.5SUSE-SU-2026:20525-1 4 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421) - CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499) - CVE-2025-6…
first Feb 26, 2026 -
Medium max 6.9SUSE-SU-2026:20494-1 1 CVE
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 17, 2026 -
Medium max 5.3SUSE-SU-2026:20491-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed possible DNS response injection via the use of fixed source ports for wide-area DNS queries (bsc#1233421).
first Feb 17, 2026 -
Medium max 6.9SUSE-SU-2026:20481-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Feb 17, 2026 -
Medium max 6.9SUSE-SU-2026:20454-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 17, 2026 -
Medium max 5.4SUSE-SU-2026:20446-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 16, 2026 -
Medium max 6.8SUSE-SU-2026:20434-1 2 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues: Upgrade openCryptoki to 3.26 (jsc#PED-14609) Security fixes: - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673). - CVE-2026-238…
first Feb 13, 2026 -
Medium max 4.3SUSE-SU-2026:20422-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Feb 11, 2026 -
Medium max 6.9SUSE-SU-2026:20580-1 2 CVEs
Security update for cockpit-repos
This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325). - CVE-2025-64718: js-y…
first Feb 18, 2026 -
Medium max 5.3SUSE-SU-2026:20578-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).
first Feb 18, 2026 -
Medium max 6.9SUSE-SU-2026:20576-1 1 CVE
Security update for cockpit-machines, cockpit
This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324) Changes in cockpit-machines: - Update to 346 * 346 - Performance improvements - Translation updat…
first Feb 17, 2026 -
Medium max 6.8SUSE-SU-2026:20575-1 1 CVE
Security update for wicked2nm
This update for wicked2nm fixes the following issues: - Update to version 1.4.1 - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908).
first Feb 17, 2026 -
Medium max 6.3SUSE-SU-2026:20374-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Le…
first Feb 16, 2026 -
Medium max 6.1SUSE-SU-2026:20365-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Jan 21, 2026 -
Medium max 6.9SUSE-SU-2026:20338-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325).
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:20237-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026