35,581 results · Feed
-
Critical max 9.8SUSE-SU-2026:3264-1 6 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.40 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 27, 2026 -
Critical max 9.6SUSE-SU-2026:3265-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Jul 27, 2026 -
Medium max 6.5SUSE-SU-2026:3273-1 3 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass …
first Jul 27, 2026 -
Critical max 9.6SUSE-SU-2026:3266-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Jul 27, 2026 -
Critical max 9.8SUSE-SU-2026:3256-1 6 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
-
Critical max 9.8SUSE-SU-2026:3254-1 6 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate…
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:11380-1 24 CVEs
libunbound8-1.25.2-1.1 on GA media
These are all security issues fixed in the libunbound8-1.25.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 5.1openSUSE-SU-2026:11379-1 2 CVEs
spice-vdagent-0.23.0-4.1 on GA media
These are all security issues fixed in the spice-vdagent-0.23.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 6.5openSUSE-SU-2026:11378-1 1 CVE
python313-CherryPy-18.10.0-4.1 on GA media
These are all security issues fixed in the python313-CherryPy-18.10.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Medium max 6.7openSUSE-SU-2026:11377-1 9 CVEs
libssh-config-0.11.5-1.1 on GA media
These are all security issues fixed in the libssh-config-0.11.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 8.6openSUSE-SU-2026:11375-1 9 CVEs
bind-9.20.26-1.1 on GA media
These are all security issues fixed in the bind-9.20.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:11374-1 1 CVE
apptainer-1.5.3-1.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 7.5openSUSE-SU-2026:11382-1 1 CVE
yq-4.53.3-1.2 on GA media
These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
High max 8.8openSUSE-SU-2026:11381-1 2 CVEs
valkey-9.1.1-1.1 on GA media
These are all security issues fixed in the valkey-9.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Critical max 9.6openSUSE-SU-2026:11376-1 3 CVEs
ignition-2.26.0-5.1 on GA media
These are all security issues fixed in the ignition-2.26.0-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2026 -
Low max 3.3openSUSE-SU-2026:21442-1 1 CVE
Security update for alloy
This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is par…
first Jul 24, 2026 -
Critical max 9.6openSUSE-SU-2026:21441-1 2 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266629). - CVE-2026-56852: golang.org/x/text/unic…
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:21440-1 9 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial o…
first Jul 24, 2026 -
High max 8.1openSUSE-SU-2026:21439-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228). - CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_…
first Jul 24, 2026 -
Medium max 6.7openSUSE-SU-2026:21444-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial …
first Jul 25, 2026 -
UnscoredopenSUSE-SU-2026:21443-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
first Jul 25, 2026 -
Critical max 10.0openSUSE-SU-2026:11373-1 228 CVEs
firefox-esr-153.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 25, 2026 -
High max 7.9openSUSE-SU-2026:11372-1 1 CVE
python313-sh-2.3.0-1.1 on GA media
These are all security issues fixed in the python313-sh-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.6openSUSE-SU-2026:11369-1 1 CVE
opennlp-1.9.5-2.1 on GA media
These are all security issues fixed in the opennlp-1.9.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.3openSUSE-SU-2026:11368-1 6 CVEs
openjfx-17.0.20.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 8.1openSUSE-SU-2026:11367-1 1 CVE
libnutclient2-2.8.5-2.1 on GA media
These are all security issues fixed in the libnutclient2-2.8.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11366-1 2 CVEs
mcphost-0.34.0-9.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 5.3openSUSE-SU-2026:11365-1 1 CVE
liboqs-devel-0.16.0-2.1 on GA media
These are all security issues fixed in the liboqs-devel-0.16.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 6.5openSUSE-SU-2026:11364-1 3 CVEs
libknet-devel-1.33-2.1 on GA media
These are all security issues fixed in the libknet-devel-1.33-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11363-1 9 CVEs
java-25-openjdk-25.0.4.0-1.1 on GA media
These are all security issues fixed in the java-25-openjdk-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 7.5openSUSE-SU-2026:11362-1 9 CVEs
java-21-openjdk-21.0.12.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
High max 8.8openSUSE-SU-2026:11360-1 2 CVEs
ffmpeg-4-4.4.8-2.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Critical max 9.8openSUSE-SU-2026:11359-1 33 CVEs
MozillaThunderbird-140.13.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Critical max 10.0openSUSE-SU-2026:11358-1 63 CVEs
MozillaFirefox-153.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-153.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Critical max 9.8openSUSE-SU-2026:11371-1 5 CVEs
python313-numpy-2.4.6-1.1 on GA media
These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Low max 3.5openSUSE-SU-2026:11370-1 1 CVE
python-magic-wormhole-bash-completion-0.24.0-1.1 on GA media
These are all security issues fixed in the python-magic-wormhole-bash-completion-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Medium max 6.5openSUSE-SU-2026:11361-1 1 CVE
ffmpeg-7-7.1.4-5.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2026 -
Critical max 9.6openSUSE-SU-2026:21422-1 2 CVEs
Security update for helm
This update for helm fixes the following issues - Update to version 3.21.3 - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-56852: gol…
first Jul 22, 2026 -
Critical max 9.1openSUSE-SU-2026:21418-1 1 CVE
Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service (bsc#124939…
first Jul 22, 2026 -
Medium max 5.5openSUSE-SU-2026:21417-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451). Changes for avahi: - Make /var/lib/avahi-autoipd a ghost dir instead of packaging it since avahi-autoi…
first Jul 22, 2026