35,581 results · Feed
-
Medium max 5.9SUSE-SU-2026:22896-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22895-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 22, 2026 -
Medium max 5.4SUSE-SU-2026:22893-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 22, 2026 -
Critical max 9.6SUSE-SU-2026:22892-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).
first Jul 22, 2026 -
Critical max 9.8SUSE-SU-2026:22889-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 21, 2026 -
High max 7.8SUSE-SU-2026:22888-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).
first Jul 21, 2026 -
High max 8.8SUSE-SU-2026:3248-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ip…
first Jul 25, 2026 -
Medium max 6.4SUSE-SU-2026:3244-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Fix soft reboot not restarting user services with default.target…
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3239-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3235-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 24, 2026 -
High max 8.7SUSE-SU-2026:22921-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openssl…
first Jul 24, 2026 -
Medium max 4.8SUSE-SU-2026:22920-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - Incomplete fix for CVE-2026-12478: out-of-bounds read in the `process_frame()` function of `SoupWebSocketConnection` (bsc#1271401).
first Jul 24, 2026 -
UnscoredSUSE-SU-2026:22911-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_27
This update for kernel-livepatch-MICRO-6-0_Update_27 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 27
first Jul 22, 2026 -
Low max 2.0SUSE-SU-2026:22906-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the `gzexe` utility when the `mktemp` utility is not available in a user's `PATH` (bsc#1269622).
first Jul 24, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CV…
first Jul 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). -…
first Jul 22, 2026 -
High max 8.8openSUSE-SU-2026:11384-1 1 CVE
ffmpeg-7-7.1.5-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 27, 2026 -
High max 8.8openSUSE-SU-2026:11383-1 4 CVEs
chromedriver-150.0.7871.186-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.186-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 27, 2026 -
High max 7.8SUSE-SU-2026:3253-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
first Jul 25, 2026 -
High max 7.5SUSE-SU-2026:3240-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 24, 2026 -
High max 7.5SUSE-SU-2026:3238-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Jul 24, 2026 -
Medium max 6.5SUSE-SU-2026:22922-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue - Update to version 2.14.3 - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates (bsc#1271045).
first Jul 24, 2026 -
Medium max 6.7SUSE-SU-2026:22919-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service (bsc#1262684).
first Jul 24, 2026 -
High max 8.7SUSE-SU-2026:22917-1 13 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2022-24713: regex: high complexity when parsing regexes with large repetitions on empty sub-expressions can lead to DoS (bsc#1196972). - …
first Jul 23, 2026 -
UnscoredSUSE-SU-2026:22916-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_27
This update for kernel-livepatch-MICRO-6-0-RT_Update_27 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 27
first Jul 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Low max 1.8SUSE-SU-2026:22894-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 22, 2026 -
Medium max 6.4SUSE-SU-2026:22890-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644). …
first Jul 21, 2026 -
Critical max 9.6SUSE-SU-2026:22887-1 4 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…
first Jul 21, 2026 -
High max 7.3SUSE-SU-2026:22886-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when process…
first Jul 21, 2026 -
UnscoredSUSE-SU-2026:22885-1 0 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issue - GHSA-pw6j-qg29-8w7f: `CurlAsyncHTTPClient` leaks per-request credentials on handle reuse (bsc#1269012).
first Jul 21, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 20, 2026