35,648 results · Feed
-
Critical max 9.8
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:22671-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_26
This update for kernel-livepatch-MICRO-6-0_Update_26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26
first Jul 6, 2026 -
Medium max 5.3SUSE-SU-2026:22668-1 1 CVE
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc#1268882).
first Jul 9, 2026 -
Medium max 6.8SUSE-SU-2026:22667-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jul 7, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: …
first Jul 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: fix…
first Jul 6, 2026 -
High max 8.2SUSE-SU-2026:22664-1 10 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the `jvp_string_append()` and `jvp_string_copy_replace_bad` functions can lead to heap buffer overflow when evaluating untrusted jq queries (bsc#1262044). - CVE-2026-3394…
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:22663-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:11318-1 3 CVEs
python313-pyasn1-0.6.4-1.1 on GA media
These are all security issues fixed in the python313-pyasn1-0.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 4.8openSUSE-SU-2026:11316-1 1 CVE
libsoup-3_0-0-3.6.6-7.1 on GA media
These are all security issues fixed in the libsoup-3_0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.5openSUSE-SU-2026:11315-1 5 CVEs
libgit2-1_9-1.9.6-1.1 on GA media
These are all security issues fixed in the libgit2-1_9-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Critical max 9.6openSUSE-SU-2026:11314-1 7 CVEs
kubevirt1.8-container-disk-1.8.4-2.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 5.5openSUSE-SU-2026:11313-1 1 CVE
avahi-0.8-45.1 on GA media
These are all security issues fixed in the avahi-0.8-45.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.1openSUSE-SU-2026:11312-1 3 CVEs
acl-2.4.0-1.1 on GA media
These are all security issues fixed in the acl-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 5.4openSUSE-SU-2026:11311-1 2 CVEs
MozillaFirefox-152.0.6-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Medium max 6.9openSUSE-SU-2026:11317-1 1 CVE
iscsiuio-0.7.8.8-112.1 on GA media
These are all security issues fixed in the iscsiuio-0.7.8.8-112.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
Low max 3.7openSUSE-SU-2026:11310-1 14 CVEs
ImageMagick-7.1.2.27-3.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 20, 2026 -
High max 7.3SUSE-SU-2026:3140-1 9 CVEs
Security update for libreoffice
This update for libreoffice fixes the following issues: Update to LibreOffice 26.2.5.1. Security issues fixed: - CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters (bsc#1264357). - CVE-2026-6039: denial o…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3138-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues - Update to version 2.7.0~git212.9b0755edb. - CVE-2026-11610: heap buffer overflow in `sasl_io_recv()` via padded SASL UNBIND (bsc#1270695). - CVE-2026-11611: content synchronization persistent search plugin c…
first Jul 20, 2026 -
UnscoredSUSE-SU-2026:3126-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Jul 20, 2026 -
Medium max 6.8SUSE-SU-2026:3124-1 1 CVE
Security update for microcode_ctl
This update for microcode_ctl fixes the following issue: - CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks (bsc#1265189). Changes for microcode_ctl: - Intel CPU Microcode was updated to the 20260512…
first Jul 20, 2026 -
Critical max 9.1SUSE-SU-2026:3123-1 1 CVE
Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service (bsc#12493…
first Jul 20, 2026 -
UnscoredSUSE-SU-2026:3122-1 0 CVEs
Security update for systemd, systemd-mini
This update for systemd, systemd-mini fixes the following issues Changes for systemd: - Import commit 435c5779a785b4263b4dcacb70f50ef1cc3f9a7b (bsc#1267647). - Import commit 7aa089f75b77b2db22941081c37b8917ea8d0dda (bsc#1261982). - udev/scsi-id: check for inv…
first Jul 20, 2026 -
Medium max 4.3SUSE-SU-2026:3121-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jul 20, 2026 -
High max 7.2SUSE-RU-2026:2769-1 2 CVEs
Recommended update 5.1.4 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808) - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804) - Improved shutdown rel…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3139-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3137-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 2.2.10~git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap buffer overflow when processing a specially crafted oversized LD…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3136-1 14 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to version 2.2.10~git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap buffer overflow when processing a specially crafted oversized LD…
first Jul 20, 2026 -
Medium max 6.9SUSE-SU-2026:3135-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 20, 2026 -
Medium max 6.9SUSE-SU-2026:3134-1 1 CVE
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to 3.1.28.
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3133-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence …
first Jul 20, 2026 -
Critical max 9.1SUSE-SU-2026:3132-1 4 CVEs
Security update for python311
This update for python311 fixes the following issues - CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host (bsc#1261969). - CVE-2026-4786: URLs containing `%action` can bypass mitigation that allows command injection via the `w…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3131-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 20, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2025-71302:…
first Jul 20, 2026 -
High max 8.8SUSE-SU-2026:3125-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence…
first Jul 20, 2026 -
Critical max 9.6openSUSE-SU-2026:11309-1 7 CVEs
chromedriver-150.0.7871.128-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.128-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 19, 2026 -
Medium max 6.5openSUSE-SU-2026:21367-1 9 CVEs
Security update for lux
This update for lux fixes the following issues: Changes in lux: - CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506: Issues when parsing HTML files (bsc#1267110) - CVE-2024-45338: Denial of service due to non-linear parsing of cas…
first Jul 17, 2026 -
High max 7.5openSUSE-SU-2026:21366-1 2 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331) - CVE-2026-8595: Fix stored XSS in the table panel (bsc#1271557)
first Jul 17, 2026 -
Medium max 6.5openSUSE-SU-2026:21368-1 9 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - Update to 3.8.7 (bugfix release) - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack (bsc#1271617) - CVE-2026-47083: ESEARCH cross-user content oracle (b…
first Jul 17, 2026