35,581 results · Feed
-
Medium max 6.5openSUSE-SU-2026:21415-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-o…
first Jul 22, 2026 -
Critical max 9.6openSUSE-SU-2026:21413-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…
first Jul 22, 2026 -
Critical max 9.8openSUSE-SU-2026:21412-1 4 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director (bsc#1271629). - CVE-2026-15043: `DBI:SQ…
first Jul 22, 2026 -
Critical max 9.1openSUSE-SU-2026:21411-1 5 CVEs
Security update for perl
This update for perl fixes the following issues: - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date (bsc#1266361). - CVE-2026-8376: heap buffer overflow when compiling regular expressions with…
first Jul 22, 2026 -
High max 7.5openSUSE-SU-2026:21410-1 6 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte …
first Jul 22, 2026 -
UnscoredopenSUSE-SU-2026:21408-1 0 CVEs
Security update for joe
This update for joe fixes the following issue - CVE-2026-13412: improper validation in tag-file parser can lead to arbitrary command execution (bsc#1269379).
first Jul 22, 2026 -
High max 8.7openSUSE-SU-2026:21406-1 7 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270542). - CVE-2026-41678: openssl: incorrect bounds asse…
first Jul 22, 2026 -
Low max 2.9openSUSE-SU-2026:21401-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
first Jul 21, 2026 -
High max 7.7openSUSE-SU-2026:21400-1 1 CVE
Security update for radvd
This update for radvd fixes the following issue - CVE-2026-48715: crafted ICMPv6 Router Advertisement can lead to a stack-based buffer overflow (bsc#1268641). Changes for radvd: - Update to version 2.21. * feat: RFC8319 support: Increase max AdvDefaultLifetim…
first Jul 21, 2026 -
Critical max 9.8openSUSE-SU-2026:21399-1 6 CVEs
Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions
This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to …
first Jul 21, 2026 -
Critical max 9.6openSUSE-SU-2026:21395-1 3 CVEs
Security update for trivy
This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266495). - CVE-2026-50151: oras-go: Credential forwardin…
first Jul 20, 2026 -
Medium max 5.1openSUSE-SU-2026:21393-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash (bsc#1271351). - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permi…
first Jul 20, 2026 -
Critical max 9.6openSUSE-SU-2026:21433-1 1 CVE
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 (bsc#1266602)
first Jul 22, 2026 -
Medium max 5.4openSUSE-SU-2026:21424-1 1 CVE
Security update for apache-ivy
This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting arbitrary files outside the configured "buildRoot" directory (bsc#1271727). Changes for apache-ivy: - Upgrade to …
first Jul 22, 2026 -
High max 7.5openSUSE-SU-2026:21423-1 2 CVEs
Security update for jline3
This update for jline3 fixes the following issues: - CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet `NEW-ENVIRON` variables (bsc#1269021). - CVE-2026-56741: unauthenticated remote DoS via Unbounded Telnet NAWS Terminal Geometry …
first Jul 22, 2026 -
Medium max 6.9openSUSE-SU-2026:21409-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: * Fix compilation with G…
first Jul 22, 2026 -
High max 7.5openSUSE-SU-2026:21392-1 3 CVEs
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…
first Jul 20, 2026 -
Medium max 5.5openSUSE-SU-2026:21391-1 11 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPi…
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…
first Jul 21, 2026 -
Medium max 6.7openSUSE-SU-2026:21387-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Jul 20, 2026 -
High max 8.7openSUSE-SU-2026:21386-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-4167…
first Jul 20, 2026 -
Low max 2.9openSUSE-SU-2026:21385-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 20, 2026 -
High max 8.7
Security update 5.0.8 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554) - CVE-2026-27459: pyOpenSSL: Fixed issue with large …
first Jun 3, 2026 -
High max 7.5
Security update 5.0.8 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security Fixes: - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248707) golang-github-prometheus-node_exporter was updated from version 1.5…
first Jun 3, 2026 -
High max 7.8
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fixed …
first Mar 25, 2026 -
Medium max 5.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.75 (jsc#ECO-3319): - Added Ism profile for OL8, OL9 - Added new product kylinserver10 - Created OL10 product - Release SLMicro5 product - Replaced two date injections by SO…
first Feb 14, 2025 -
High max 7.8
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
Critical max 9.6SUSE-EL-9-CLIENT-TOOLS-2025-2499 12 CVEs
Security update 5.0.5 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#12445…
first Jul 23, 2025 -
High max 8.8
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security fixes on Python 3.11 interpreter: * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes (bsc#1229873, bsc#1230059) * CVE-2024-8088: Prevent malformed …
first Nov 18, 2024 -
Medium max 6.1
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter was updated from version 1.0.1 to 1.0.8: - Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency in version 1.0.2 (bsc#1213933) - Bugs fixed: * Require G…
first Nov 18, 2024 -
High max 7.7
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (b…
first May 6, 2024 -
Medium max 6.7
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for auto…
first Dec 13, 2023 -
Medium max 5.3
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441) * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cach…
first Sep 28, 2023 -
High max 7.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501) * CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270) * CVE-2022-461…
first Sep 28, 2023 -
Medium max 6.1
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2023-28370: Tornado: Fix an open redirect issue in the static file handler (bsc#1211741) - Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994) - Fix ModuleNotF…
first Aug 2, 2023 -
High max 7.5
Security update for SUSE Manager Client Tools
This update fixes the following issues: prometheus-postgres_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208060) - Other non-security issues fixed: * Adapt the systemd service security configuration …
first May 11, 2023 -
Critical max 9.1openSUSE-SU-2026:21435-1 2 CVEs
Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes (bsc#1271640) - CVE-2026-57074: Fixed unbounded character lookahead (bsc#1271637)
first Jul 22, 2026 -
High max 8.4openSUSE-SU-2026:21431-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * Various integratio…
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:21430-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
first Jul 23, 2026 -
High max 7.5openSUSE-SU-2026:21427-1 1 CVE
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parse_date (bsc#1271705).
first Jul 22, 2026