35,648 results · Feed
-
UnscoredSUSE-SU-2026:3181-1 0 CVEs
Security update for python3-sqlparse
This update for python3-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 22, 2026 -
UnscoredSUSE-SU-2026:3180-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue - Fixed a bug where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 22, 2026 -
UnscoredSUSE-SU-2026:3179-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue - Fixed a bug where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 22, 2026 -
High max 7.5SUSE-SU-2026:3178-1 2 CVEs
Security update for nasm
This update for nasm fixes the following issues - CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the obj_directive() function (bsc#1261986). - CVE-2026-6068: heap use after free vulnerability in response file processing …
first Jul 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Medium max 6.0openSUSE-SU-2026:21383-1 1 CVE
Security update for beets
This update for beets fixes the following issues: Changes in beets: - CVE-2026-42052: Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. (boo#1263988)
first Jul 20, 2026 -
High max 7.3openSUSE-SU-2026:21380-1 2 CVEs
Security update for opam
This update for opam fixes the following issues: Changes in opam: - Update to version 2.5.2 (CVE-2026-57825) see included CHANGES file for details - Update to version 2.5.1 (CVE-2026-41082 bsc#1262281) see included CHANGES file for details - Update to version…
first Jul 18, 2026 -
Critical max 9.6openSUSE-SU-2026:21379-1 5 CVEs
Security update for ctop
This update for ctop fixes the following issues: Changes in ctop embedded dependencies: - CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710) - CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#…
first Jul 18, 2026 -
Medium max 6.5openSUSE-SU-2026:21375-1 3 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions (bsc#1268902). - CVE-2026-5…
first Jul 18, 2026 -
High max 8.4openSUSE-SU-2026:21374-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping (bsc#1271194). - CVE-2026-59857: out-of-bounds write in SAL soundfol…
first Jul 18, 2026 -
Medium max 6.6openSUSE-SU-2026:21372-1 8 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead …
first Jul 18, 2026 -
Low max 2.0openSUSE-SU-2026:21371-1 1 CVE
Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH (bsc#1269622).
first Jul 18, 2026 -
High max 8.8openSUSE-SU-2026:21370-1 9 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12891: unchecked aspect_ratio_idc value used as an array index in the H.266 parser could cause a global out- of-bounds read (bsc#1268872). - CVE-2026-12892: 1-byte heap out-of-bounds …
first Jul 18, 2026 -
High max 7.2SUSE-SU-2026:22737-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185).
first Jul 9, 2026 -
Medium max 6.4SUSE-SU-2026:22736-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644).…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Low max 2.1SUSE-SU-2026:22603-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 21, 2026 -
Medium max 6.2SUSE-SU-2026:3169-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 21, 2026 -
None max 0.0SUSE-SU-2026:3168-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703).
first Jul 21, 2026 -
Critical max 9.1SUSE-SU-2026:3167-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 21, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2025-71302: drm…
first Jul 21, 2026 -
Medium max 5.4SUSE-SU-2026:3153-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Jul 21, 2026 -
Medium max 5.3openSUSE-SU-2026:11322-1 1 CVE
python313-Js2Py-0.74-6.1 on GA media
These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
UnscoredopenSUSE-SU-2026:11321-1 0 CVEs
perl-YAML-1.320.0-1.1 on GA media
These are all security issues fixed in the perl-YAML-1.320.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
High max 8.1openSUSE-SU-2026:11320-1 9 CVEs
libntfs-3g-devel-2022.10.3-8.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed.
first Jul 21, 2026 -
Medium max 5.6SUSE-SU-2026:3165-1 1 CVE
Security update for php7
This update for php7 fixes the following issue - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).
first Jul 21, 2026