35,581 results · Feed
-
High max 8.8SUSE-SU-2026:22817-1 9 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12891: unchecked aspect_ratio_idc value used as an array index in the H.266 parser could cause a global out- of-bounds read (bsc#1268872). - CVE-2026-12892: 1-byte heap out-of-bounds …
first Jul 18, 2026 -
Medium max 6.5SUSE-SU-2026:22815-1 2 CVEs
Security update for freetype2
This update for freetype2 fixes the following issues - Update to version 2.14.3 - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). - CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in t…
first Jul 16, 2026 -
Medium max 6.5SUSE-SU-2026:22814-1 1 CVE
Security update for nmap
This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).
first Jul 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…
first Jul 21, 2026 -
UnscoredSUSE-SU-2026:22811-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_27
This update for kernel-livepatch-MICRO-6-0-RT_Update_27 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 27
first Jul 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CV…
first Jul 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). -…
first Jul 22, 2026 -
UnscoredSUSE-SU-2026:22808-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_27
This update for kernel-livepatch-MICRO-6-0_Update_27 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 27
first Jul 22, 2026 -
Medium max 5.9SUSE-SU-2026:22807-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).
first Jul 22, 2026 -
Low max 1.8SUSE-SU-2026:22806-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269790).
first Jul 22, 2026 -
High max 8.7SUSE-SU-2026:22801-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 20, 2026 -
Critical max 9.6SUSE-SU-2026:22800-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:22799-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 17, 2026 -
UnscoredSUSE-SU-2026:22798-1 0 CVEs
Security update for pcr-oracle
This update for pcr-oracle fixes the following issue: - integer underflow vulnerability in `parse_sbatlevel_section()` (bsc#1265042).
first Jul 17, 2026 -
High max 8.4SUSE-SU-2026:22797-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrary…
first Jul 17, 2026 -
High max 7.3SUSE-SU-2026:22796-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when proces…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues: The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition i…
first Jul 17, 2026 -
Low max 2.1SUSE-SU-2026:22650-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 21, 2026 -
High max 8.8SUSE-SU-2026:3299-1 6 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-52720: invalid check of total area instead of individual dimensions could trigger …
first Jul 27, 2026 -
High max 8.1SUSE-SU-2026:3298-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
first Jul 27, 2026 -
High max 7.5SUSE-SU-2026:3297-1 1 CVE
Security update for python-msgpack-python
This update for python-msgpack-python fixes the following issue: - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
first Jul 27, 2026 -
High max 7.7SUSE-SU-2026:3291-1 3 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE…
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3289-1 5 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: valida…
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3286-1 6 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 27, 2026 -
High max 7.5SUSE-SU-2026:3284-1 11 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU). Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994). - C…
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3283-1 6 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 27, 2026 -
Low max 3.7SUSE-SU-2026:3281-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bs…
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3316-1 6 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 27, 2026 -
Medium max 6.5SUSE-SU-2026:3302-1 8 CVEs
Security update for libssh
This update for libssh fixes the following issues - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-598…
first Jul 27, 2026 -
High max 8.8SUSE-SU-2026:3301-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ip…
first Jul 27, 2026 -
Critical max 9.6SUSE-SU-2026:3300-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Jul 27, 2026 -
High max 7.5SUSE-SU-2026:3272-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). Changes for openssl-1_0_0: - Security fix: * Fix NULL p…
first Jul 27, 2026 -
High max 8.4SUSE-SU-2026:3271-1 3 CVEs
Security update for vim
This update for vim fixes the following issues - Updated to version 9.2.0780. - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194). - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195). - CVE-2026-59858: Arbitrar…
first Jul 27, 2026 -
Medium max 6.8SUSE-SU-2026:3270-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that can allow attackers to corrupt memory (bsc#1268853).
first Jul 27, 2026 -
Low max 2.0SUSE-SU-2026:3269-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue: - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 27, 2026 -
High max 8.7SUSE-SU-2026:3268-1 11 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-54059: bomb protection bypass via PCF font loading due to `Image.frombytes()` being call…
first Jul 27, 2026 -
Critical max 9.6SUSE-SU-2026:3267-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Jul 27, 2026