35,526 results · Feed
-
Critical max 9.8SUSE-SU-2026:5071-1 13 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#126…
-
Critical max 9.8SUSE-SU-2026:5055-1 10 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in n…
-
Medium max 6.1openSUSE-SU-2026:12394-1 1 CVE
libzvbi-chains0-0.2.46-2.1 on GA media
These are all security issues fixed in the libzvbi-chains0-0.2.46-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Low max 3.7openSUSE-SU-2026:12393-1 1 CVE
ruby4.0-rubygem-rack-3.2.8-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rack-3.2.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Medium max 5.4openSUSE-SU-2026:12392-1 1 CVE
python313-pylint-4.1.3-1.1 on GA media
These are all security issues fixed in the python313-pylint-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Unscored max 9.1openSUSE-SU-2026:12389-1 1 CVE
perl-HTTP-Parser-XS-0.180.0-1.1 on GA media
These are all security issues fixed in the perl-HTTP-Parser-XS-0.180.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
High max 7.5openSUSE-SU-2026:12388-1 4 CVEs
libosmocodec-devel-1.14.2-2.1 on GA media
These are all security issues fixed in the libosmocodec-devel-1.14.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Medium max 6.8openSUSE-SU-2026:12385-1 1 CVE
bugwarden-0.7.0-1.1 on GA media
These are all security issues fixed in the bugwarden-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
High max 8.1openSUSE-SU-2026:12391-1 6 CVEs
python313-GitPython-3.2.1-1.1 on GA media
These are all security issues fixed in the python313-GitPython-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Critical max 9.8openSUSE-SU-2026:12390-1 10 CVEs
python313-Authlib-1.9.1-1.1 on GA media
These are all security issues fixed in the python313-Authlib-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Medium max 6.9openSUSE-SU-2026:12387-1 1 CVE
google-osconfig-agent-20261022.00-2.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Medium max 6.9openSUSE-SU-2026:12386-1 1 CVE
google-guest-agent-20261022.00-2.1 on GA media
These are all security issues fixed in the google-guest-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2026 -
Low max 3.7SUSE-SU-2026:5017-1 1 CVE
Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j
This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation whe…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5016-1 12 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on s…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5012-1 9 CVEs
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 2, 2026 -
UnscoredSUSE-SU-2026:5005-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng rebuilds it against the current go security release.
first Nov 2, 2026 -
High max 7.0SUSE-SU-2026:4637-2 1 CVE
Security update for gcc48
This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Nov 2, 2026 -
Critical max 9.1SUSE-RU-2026:5018-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5048-1 8 CVEs
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 2, 2026 -
High max 7.8SUSE-SU-2026:5039-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
first Nov 2, 2026 -
Critical max 9.2SUSE-SU-2026:5038-1 29 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802). - CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to un…
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Nov 2, 2026 -
UnscoredSUSE-SU-2026:5035-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5034-1 8 CVEs
Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 2, 2026 -
High max 7.3SUSE-SU-2026:5042-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-112307: arbitrary code execution via unescaped PHP output formatting (bsc#1286096).
first Nov 2, 2026 -
Critical max 9.2
Security update for nodejs24
This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char …
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:5020-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in net…
-
Critical max 9.8SUSE-SU-2026:5019-1 8 CVEs
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
-
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
UnscoredSUSE-SU-2026:4956-1 0 CVEs
Security update for docker
This update for docker rebuilds it against the current go security release.
first Oct 30, 2026 -
UnscoredSUSE-SU-2026:4955-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Oct 30, 2026 -
Critical max 9.8SUSE-SU-2026:4954-1 21 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2…
first Oct 30, 2026 -
Medium max 5.3SUSE-SU-2026:4953-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issue: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).
first Oct 30, 2026 -
UnscoredSUSE-SU-2026:4950-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng rebuilds it against the current go security release.
first Oct 30, 2026 -
High max 8.7SUSE-SU-2026:4949-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832).
first Oct 30, 2026 -
High max 8.9SUSE-SU-2026:4948-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding …
first Oct 30, 2026 -
High max 8.2SUSE-SU-2026:24460-1 9 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).…
first Oct 27, 2026 -
Medium max 4.3openSUSE-SU-2026:12383-1 1 CVE
libQt63DAnimation6-6.12.0-2.1 on GA media
These are all security issues fixed in the libQt63DAnimation6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
High max 7.3openSUSE-SU-2026:12382-1 1 CVE
python313-sqlparse-0.6.0-2.1 on GA media
These are all security issues fixed in the python313-sqlparse-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026 -
Medium max 5.2openSUSE-SU-2026:12380-1 1 CVE
bson-devel-2.5.7-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2026