35,581 results · Feed
-
Medium max 5.3SUSE-SU-2026:3390-1 1 CVE
Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn
This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: * New features: + Add SystemProperties.getPath(String, Supplier<Path>) + Add JavaVersion.JAVA_25 + Add Java…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3388-1 4 CVEs
Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3383-1 3 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86:…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3376-1 1 CVE
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3372-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …
first Jul 28, 2026 -
Medium max 6.4SUSE-SU-2026:3368-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3367-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3366-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3365-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3364-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3363-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:3362-1 5 CVEs
Security update for samba
This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths withou…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3354-1 5 CVEs
Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.205 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: valida…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:3350-1 2 CVEs
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-53359: KVM…
-
Critical max 9.8SUSE-SU-2026:3351-1 3 CVEs
Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM…
-
Critical max 9.8SUSE-SU-2026:3345-1 5 CVEs
Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.200 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: valida…
-
High max 8.8SUSE-SU-2026:3344-1 3 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: K…
-
Critical max 9.8SUSE-SU-2026:3343-1 6 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
-
Critical max 9.6SUSE-SU-2026:3342-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-56852: gol…
-
High max 7.5SUSE-SU-2026:3341-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
-
Medium max 6.5SUSE-SU-2026:3340-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue: - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
-
High max 7.5SUSE-SU-2026:3339-1 4 CVEs
Security update for apache-sshd
This update for apache-sshd fixes the following issues: Update to upstream version 2.19.0. Security issues fixed: - CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a path traversal issue in the `sshd-scp` c…
-
Critical max 9.8SUSE-SU-2026:3321-1 6 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.11 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3319-1 5 CVEs
Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: valida…
-
Critical max 9.8SUSE-SU-2026:3246-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 25, 2026 -
High max 7.8SUSE-SU-2026:3245-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding (bsc#1264962). - CVE-2026-8328: server-supplied PASV host address is trust…
first Jul 24, 2026 -
Low max 2.9SUSE-SU-2026:3243-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 24, 2026 -
Low max 2.0SUSE-SU-2026:3241-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue: - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 24, 2026 -
High max 8.4SUSE-SU-2026:3237-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780. - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrar…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3236-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 24, 2026 -
Low max 2.9SUSE-SU-2026:22923-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue - CVE-2026-57062: CMS parsing in `gpgsm` mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 24, 2026 -
Low max 2.0SUSE-SU-2026:22918-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the `gzexe` utility when the `mktemp` utility is not available in a user's `PATH` (bsc#1269622).
first Jul 23, 2026 -
High max 7.2SUSE-SU-2026:22910-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Jul 21, 2026 -
Medium max 6.7SUSE-SU-2026:22907-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue: - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 24, 2026 -
Medium max 4.6SUSE-SU-2026:22905-1 3 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…
first Jul 23, 2026 -
High max 8.4SUSE-SU-2026:22901-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrary…
first Jul 22, 2026 -
High max 7.1SUSE-SU-2026:22900-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22898-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 22, 2026 -
High max 8.8SUSE-SU-2026:22897-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 22, 2026