35,559 results · Feed
-
Critical max 9.8SUSE-SU-2026:4983-1 9 CVEs
Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4979-1 8 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4978-1 10 CVEs
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4977-1 9 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb-…
first Nov 1, 2026 -
Critical max 9.8SUSE-SU-2026:4972-1 8 CVEs
Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …
first Oct 31, 2026 -
Critical max 9.8SUSE-SU-2026:4969-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…
first Oct 31, 2026 -
Critical max 9.8SUSE-SU-2026:4960-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_opt…
first Oct 31, 2026 -
High max 7.0SUSE-SU-2026:4637-1 1 CVE
Security update for gcc48
This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
-
Critical max 9.6openSUSE-SU-2026:22124-1 293 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 155.0.8059.84 (boo#1285733): * CVE-2026-110922: Use after free in Prerender * CVE-2026-110913: Memory corruption in DOM * CVE-2026-110919: Use after free in V8 * CVE-2026-110…
first Oct 28, 2026 -
Critical max 9.6openSUSE-SU-2026:22023-1 151 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 154.0.8037.97 (boo#1284015) * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103621: Integer overflow in Co…
first Oct 28, 2026 -
Critical max 9.8
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.52 (boo#1281123): * CVE-2026-93374: Use after free in Dawn * CVE-2026-93372: Buffer overflow in WebGL * CVE-2026-93375: Incorrect reference resolution in Tracing *…
first Oct 28, 2026 -
Critical max 9.8
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.82 (boo#1278683): * CVE-2026-85046: Type confusion in V8 * CVE-2026-85052: Out of bounds read in CrashReporting * CVE-2026-85043: Incomplete cleanup in Network * C…
first Oct 28, 2026 -
Critical max 9.6openSUSE-SU-2026:21624-1 438 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 151.0.7922.173 (boo#1275913): * CVE-2026-76017: Use after free in Chromoting * CVE-2026-76018: Privilege elevation in Import * CVE-2026-76019: Incorrect authorization in Work…
first Oct 28, 2026 -
High max 7.5openSUSE-SU-2026:22201-1 2 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor: * CVE-2026-114437: github.com/go-chi/chi/v5: client IP spoofing in `ClientIPFromXFF` via `X-Forwarded-For (bsc#1287881) - update to 2.1.2 (bsc#1285270, CVE-2026-78669): * I…
first Oct 28, 2026 -
High max 7.5openSUSE-SU-2026:22194-1 2 CVEs
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to 1.15.0: * Fixes VUL-0: CVE-2026-78669: excessive CPU consumption in HTTP/2 (boo#1285501) and CVE-2026-97032: HTTP/2 server crash due to HPACK encoder race (boo#1287577) by bum…
first Oct 27, 2026 -
Critical max 10.0SUSE-SU-2026:24454-1 7 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …
first Oct 26, 2026 -
High max 7.5openSUSE-SU-2026:22200-1 2 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285500) * CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due …
first Oct 28, 2026 -
UnscoredopenSUSE-SU-2026:22199-1 0 CVEs
Security update for epiphany
This update for epiphany fixes the following issues: Changes in epiphany: - CVE-2026-77679: path traversal in WebExtension XPI extraction (ZIP slip) (bsc#1276758) - CVE-2026-77682: JavaScript code injection in autofill via unsanitized CSS selector from elemen…
first Oct 28, 2026 -
Critical max 9.6openSUSE-SU-2026:22185-1 353 CVEs
Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: Chromium 156 (156.0.8078.47) promoted to stable (boo#1286350): * CVE-2026-113341: Memory corruption in Skia * CVE-2026-113279: Memory corruption in Accessibility * CVE-2026-113072: Memo…
first Oct 27, 2026 -
High max 7.5openSUSE-SU-2026:22178-1 3 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-19585: github.com/hashicorp/go-getter: path traversal during S3 and GCS directory downloads may allow files to be written outside the requested destination (bsc#1284829). - CVE-2026-78669: golang.or…
first Oct 28, 2026 -
Medium max 5.3openSUSE-SU-2026:22196-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset, without any permission on the targeted object, marking an o…
first Oct 28, 2026 -
Critical max 9.9
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Changes in roundcubemail: Update to 1.6.20: This is a security update to the version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: + Fix IMAP command inject…
first Oct 27, 2026 -
High max 7.8openSUSE-SU-2026:22192-1 3 CVEs
Security update for libmikmod
This update for libmikmod fixes the following issues: Changes in libmikmod: - CVE-2026-105839: make sure that numtrk calculation fits into an UWORD (bsc#1284366) - CVE-2026-105838: bump itpat allocation to 256, matching allowed packlen limit (bsc#1284367) - C…
first Oct 26, 2026 -
Critical max 9.8openSUSE-SU-2026:22190-1 1 CVE
Security update for perl-Dancer2-Plugin-Auth-Extensible
This update for perl-Dancer2-Plugin-Auth-Extensible fixes the following issues: Changes in perl-Dancer2-Plugin-Auth-Extensible: - updated to 0.714.0 (0.714) * Fix failing tests when sendmail binary not present on system. - updated to 0.713.0 (0.713) * Fix the…
first Oct 26, 2026 -
High max 7.5openSUSE-SU-2026:22189-1 6 CVEs
Security update for shadowsocks-rust, shadowsocks-libev
This update for shadowsocks-rust, shadowsocks-libev fixes the following issues: Changes in shadowsocks-rust: - Fix SELinux denial (name_connect) when forwarding outbound TCP traffic (boo#1284975) - Fix: Unable to bind ports below 1024 with SELinux enabled (bo…
first Oct 26, 2026 -
Medium max 6.0openSUSE-SU-2026:22188-1 8 CVEs
Security update for python-pypdf
This update for python-pypdf fixes the following issues: Changes in python-pypdf: - CVE-2026-113786: PDF containing image data labeled with the `/DCTDecode` filter causes Pillow to select and invoke an unintended image parser when the image is loaded (bsc#128…
first Oct 26, 2026 -
Critical max 9.1openSUSE-SU-2026:22187-1 15 CVEs
Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues: Changes in perl-Cpanel-JSON-XS: - updated to 4.800.0 (4.80) + Security fixes, reported by Stig Palmquist (CPANSec): * CVE-2026-110672 decode: free the hash key on "Duplicate keys not allowed" and…
first Oct 26, 2026 -
High max 8.2openSUSE-SU-2026:22177-1 9 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).…
first Oct 27, 2026 -
High max 7.8openSUSE-SU-2026:22176-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397). - CVE-2026-103226: stack-based buffer overflow in `pdfwrite` via crafted font dat…
first Oct 27, 2026 -
High max 7.5openSUSE-SU-2026:22175-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: panic in `BorrowedCertRevocationList::from_der` via empty `BIT STRING` in `IssuingDistributionPoint` (bsc#1282250). - CVE-2026-93600: rustls-webpki: name const…
first Oct 27, 2026 -
High max 7.0openSUSE-SU-2026:22174-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
first Oct 27, 2026 -
High max 8.8openSUSE-SU-2026:22172-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the con…
first Oct 26, 2026 -
High max 7.8openSUSE-SU-2026:22170-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 26, 2026 -
Critical max 9.2openSUSE-SU-2026:22169-1 14 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.86: - CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). - CVE-2026-17508: unbounded KDF iteration and memory parameters …
first Oct 26, 2026 -
Critical max 10.0SUSE-SU-2026:24458-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…
first Oct 26, 2026 -
Critical max 10.0SUSE-SU-2026:24457-1 7 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …
first Oct 26, 2026 -
Critical max 10.0SUSE-SU-2026:24456-1 7 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …
first Oct 26, 2026 -
Critical max 10.0SUSE-SU-2026:24455-1 7 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …
first Oct 26, 2026 -
Critical max 10.0SUSE-SU-2026:24453-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…
first Oct 24, 2026 -
Critical max 10.0SUSE-SU-2026:24452-1 7 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…
first Oct 24, 2026