6,765 results · Clear filters · Feed
-
Medium max 6.3SUSE-SU-2026:0693-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-12781: inadequate parameter check can cause data int…
first Feb 27, 2026 -
Medium max 6.5SUSE-SU-2026:0662-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484).
first Feb 26, 2026 -
Medium max 5.3SUSE-SU-2026:0666-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)
first Feb 26, 2026 -
Medium max 6.0SUSE-SU-2026:0664-1 6 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie…
first Feb 26, 2026 -
Medium max 6.0SUSE-SU-2026:0663-1 5 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-6075: Fixed performance degradation when using os.path.expandvars() (bsc#1252974). - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.co…
first Feb 26, 2026 -
Medium max 6.9SUSE-SU-2026:0661-1 3 CVEs
Security update for erlang
This update for erlang fixes the following issues: - CVE-2025-48039:Fixed an excessive use of system resources. (bsc#1249469) - CVE-2025-48038:Fixed an excessive use of system resources. (bsc#1249470) - CVE-2025-48040:Fixed an excessive resource consumption. …
first Feb 26, 2026 -
Medium max 6.2SUSE-SU-2026:0606-1 5 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Feb 24, 2026 -
Medium max 6.2SUSE-SU-2026:0605-1 6 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Feb 24, 2026 -
Medium max 5.5SUSE-SU-2026:0603-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979) - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
first Feb 24, 2026 -
Medium max 6.0SUSE-SU-2026:0590-1 4 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. (bsc#1257031) - CVE-2026-0865: Fixed a bug where a user-controlled header contai…
first Feb 20, 2026 -
Medium max 6.8SUSE-SU-2026:0582-1 1 CVE
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927).
first Feb 20, 2026 -
Medium max 6.8SUSE-SU-2026:0581-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).
first Feb 20, 2026 -
Medium max 5.3SUSE-SU-2026:0580-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2025-58190: Fixed a HTML parser misimplementation of a part of the HTML specification for table related tags. (bsc#1258048). - CVE-2025-47911: Fixed an issue where the HTML parser takes a very long t…
first Feb 19, 2026 -
Medium max 5.9SUSE-SU-2026:0576-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to version 20230802.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 18, 2026 -
Medium max 6.8SUSE-SU-2026:0569-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: Security fixes: - CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following (bsc#1257116) Other fixes: - Fixed FIPS mode (bsc#1248002)
first Feb 17, 2026 -
Medium max 6.2SUSE-SU-2026:0568-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Feb 17, 2026 -
Medium max 6.5SUSE-SU-2026:0567-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Feb 17, 2026 -
Medium max 6.8SUSE-SU-2026:0514-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
Medium max 6.1SUSE-SU-2026:0510-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Feb 13, 2026 -
Medium max 6.3SUSE-SU-2026:0508-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc…
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0506-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0505-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0470-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Feb 12, 2026 -
Medium max 4.3SUSE-SU-2026:0469-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
first Feb 12, 2026 -
Medium max 6.5SUSE-SU-2026:0445-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2026-0665: Added PIRQ bounds check in xen_physdev_map_pirq to avoid an out-of-bounds heap. (bsc#1256484) Other fixes: - Fixed that QEMU migration fails if a qemu-vdagent channel is present in the VM (bsc#…
first Feb 11, 2026 -
Medium max 6.9SUSE-SU-2026:0432-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to v3.51.2: - CVE-2025-7709: Fixed an integer overflow in the FTS5 extension. (bsc#1254670)
first Feb 11, 2026 -
Medium max 6.5SUSE-SU-2026:0422-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498). - CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lea…
first Feb 11, 2026 -
Medium max 5.9SUSE-SU-2026:0412-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to 20240116.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 10, 2026 -
Medium max 4.3SUSE-SU-2026:0388-1 1 CVE
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 (bsc#1257397): - CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
first Feb 5, 2026 -
Medium max 6.9SUSE-SU-2026:0386-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144) - CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)
first Feb 5, 2026 -
Medium max 5.3SUSE-SU-2026:0383-1 2 CVEs
Security update for rekor
This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishme…
first Feb 4, 2026 -
Medium max 6.5SUSE-SU-2026:0377-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: Fixed heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735)
first Feb 4, 2026 -
Medium max 6.9SUSE-SU-2026:0379-1 1 CVE
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324)
first Feb 4, 2026 -
Medium max 5.5SUSE-SU-2026:0375-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Feb 4, 2026 -
Medium max 5.4SUSE-SU-2026:0373-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 4, 2026 -
Medium max 5.4SUSE-SU-2026:0372-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 4, 2026 -
Medium max 6.8SUSE-SU-2026:0351-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following (bsc#1257116)
first Jan 30, 2026 -
Medium max 5.4SUSE-SU-2026:0355-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Jan 31, 2026 -
Medium max 5.9SUSE-SU-2026:0338-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: - CVE-2025-0838: Fixed heap buffer overflow in sized constructors, reserve(), and rehash() methods of absl:{flat,node}hash{set,map} (bsc#1237543).
first Jan 29, 2026 -
Medium max 5.3SUSE-SU-2026:0335-1 1 CVE
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2026-22701: Fixed TOCTOU race condition in SoftFileLock implementation of he filelock package (bsc#1256457)
first Jan 29, 2026