35,581 results · Feed
-
High max 7.9SUSE-SU-2026:3422-1 1 CVE
Security update for python-sh
This update for python-sh fixes the following issues: - CVE-2026-54552: incomplete privilege drop in the _uid option can allow a subprocess to retain parent supplementary groups (bsc#1272424).
-
Medium max 5.9SUSE-SU-2026:3420-1 3 CVEs
Security update for liboqs, oqs-provider
This update for liboqs, oqs-provider fixes the following issues: - disable KEM_HQC and SIG_MQOM and KEM_NTRUPRIME on s390x for now, testsuite shows them not working. Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - F…
-
Critical max 9.1SUSE-SU-2026:3419-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…
-
Critical max 9.1SUSE-SU-2026:3418-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…
-
Critical max 9.6SUSE-SU-2026:3417-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266656). - CVE-2026-56852: golang.org/x/text/unicod…
-
Critical max 9.6SUSE-SU-2026:3416-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugf…
-
Medium max 5.7SUSE-SU-2026:3413-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when …
-
UnscoredSUSE-SU-2026:3398-1 0 CVEs
Security update for rsyslog
This update for rsyslog fixes the following issue - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).
first Jul 29, 2026 -
High max 7.5SUSE-SU-2026:3397-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3396-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:21467-1 9 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unau…
first Jul 28, 2026 -
Low max 1.8SUSE-SU-2026:3395-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-61464: heap buffer overwrite when running an X11 import with a crafted window title (bsc#1271496).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3393-1 2 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 7.8SUSE-SU-2026:3392-1 1 CVE
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
first Jul 28, 2026 -
High max 8.2openSUSE-SU-2026:11409-1 1 CVE
libxmlrpc++9-1.64.03-2.1 on GA media
These are all security issues fixed in the libxmlrpc++9-1.64.03-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
High max 7.0openSUSE-SU-2026:11408-1 4 CVEs
libblkid-devel-2.42.2-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.42.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
High max 8.1openSUSE-SU-2026:11407-1 1 CVE
rsyslog-8.2606.0-1.1 on GA media
These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
Medium max 4.3openSUSE-SU-2026:11406-1 1 CVE
PackageKit-1.3.6-1.1 on GA media
These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
Medium max 5.1openSUSE-SU-2026:11405-1 4 CVEs
ImageMagick-7.1.2.28-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 29, 2026 -
Medium max 6.4SUSE-SU-2026:3394-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 28, 2026 -
Critical max 9.4openSUSE-SU-2026:21448-1 13 CVEs
Security update for agama-web-ui
This update for agama-web-ui fixes the following issues: - CVE-2025-7783: form-data: unsafe `Math.random()` function is used to select a boundary value for multipart form-encoded data (bsc#1246822). - CVE-2026-12143: form-data: CRLF injection via unescaped mu…
first Jul 27, 2026 -
Critical max 9.1openSUSE-SU-2026:21447-1 1 CVE
Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21
This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues: Changes in go compilers: - Switch from update-alternatives to new method. - Packaging im…
first Jul 27, 2026 -
High max 7.5openSUSE-SU-2026:11404-1 1 CVE
warewulf4-4.7.0-4.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11403-1 1 CVE
traefik2-2.11.53-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11402-1 1 CVE
traefik-3.7.9-1.1 on GA media
These are all security issues fixed in the traefik-3.7.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11401-1 2 CVEs
tomcat11-11.0.24-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11400-1 2 CVEs
tomcat10-10.1.57-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.57-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11399-1 2 CVEs
tomcat-9.0.120-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.120-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11398-1 2 CVEs
tekton-cli-0.45.1-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.45.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11397-1 1 CVE
jupyter-bqplot-jupyterlab-0.5.46-15.1 on GA media
These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-15.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11396-1 2 CVEs
perl-Net-DNS-1.560.0-1.1 on GA media
These are all security issues fixed in the perl-Net-DNS-1.560.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.7openSUSE-SU-2026:11395-1 4 CVEs
nsd-4.14.3-1.1 on GA media
These are all security issues fixed in the nsd-4.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 8.7openSUSE-SU-2026:11394-1 19 CVEs
netty-4.1.136-1.1 on GA media
These are all security issues fixed in the netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.8openSUSE-SU-2026:11393-1 1 CVE
logcli-3.7.4-1.1 on GA media
These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
High max 7.5openSUSE-SU-2026:11392-1 3 CVEs
kubevirt1.8-container-disk-1.8.4-3.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11391-1 1 CVE
kubernetes1.36-apiserver-1.36.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.36-apiserver-1.36.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11390-1 1 CVE
kubernetes1.35-apiserver-1.35.7-1.1 on GA media
These are all security issues fixed in the kubernetes1.35-apiserver-1.35.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11389-1 1 CVE
kubernetes1.34-apiserver-1.34.10-1.1 on GA media
These are all security issues fixed in the kubernetes1.34-apiserver-1.34.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.1openSUSE-SU-2026:11388-1 1 CVE
kubernetes1.33-apiserver-1.33.13-2.1 on GA media
These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026 -
Medium max 4.3openSUSE-SU-2026:11387-1 1 CVE
helm3-3.21.3-4.1 on GA media
These are all security issues fixed in the helm3-3.21.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2026