35,648 results · Feed
-
Critical max 10.0SUSE-SU-2026:22613-1 19 CVEs
Security update for cosign
This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…
first Jul 10, 2026 -
Critical max 9.1SUSE-SU-2026:3087-1 6 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 16, 2026 -
High max 7.5SUSE-SU-2026:3086-1 1 CVE
Security update for python-python-socketio
This update for python-python-socketio fixes the following issues: - CVE-2026-48804: Binary attachment accumulation can cause denial of service (bsc#1269491).
first Jul 16, 2026 -
High max 7.5SUSE-SU-2026:3085-1 2 CVEs
Security update for python-python-engineio
This update for python-python-engineio fixes the following issues: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS (bsc#1269544). - CVE-2026-48809: size of in…
first Jul 16, 2026 -
High max 8.7SUSE-SU-2026:3084-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Jul 16, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…
first Jul 16, 2026 -
Medium max 5.9SUSE-SU-2026:3082-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3078-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issue - Fix several memory leaks and buffer overflow (bsc#1267212).
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3077-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issue - Fix several memory leaks and buffer overflow (bsc#1267212).
first Jul 16, 2026 -
Medium max 5.9SUSE-SU-2026:3076-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 16, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bond…
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3069-1 0 CVEs
Security update for rekor
This update for rekor rebuilds it against the current go security release.
first Jul 16, 2026 -
Critical max 9.6openSUSE-SU-2026:11287-1 15 CVEs
chromedriver-150.0.7871.124-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.124-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 16, 2026 -
Critical max 9.1SUSE-SU-2026:3088-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 16, 2026 -
Medium max 5.9SUSE-SU-2026:3074-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue Security changes: - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). Other changes: - rebuild libssh2_org against openssl 1.1.1, enabling ed25519 support. (bsc#1227490)
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3071-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3070-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Jul 16, 2026 -
UnscoredSUSE-SU-2026:3068-1 0 CVEs
Security update for cosign
This update for cosign rebuilds it against the current go security release.
first Jul 16, 2026 -
Critical max 9.8SUSE-SU-2026:3067-1 3 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues The following security issues were fixed: - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-45970: bonding: alb: fix UAF in r…
first Jul 16, 2026 -
Critical max 9.8SUSE-SU-2026:3066-1 7 CVEs
Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
High max 8.9SUSE-SU-2026:2854-2 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - Regression introduced by CVE-2025-66471 fix during file download with pySSL (bsc#1270365).
first Jul 16, 2026 -
Medium max 4.6SUSE-SU-2026:22604-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
UnscoredSUSE-SU-2026:22602-1 0 CVEs
Security update for cryptsetup
This update for cryptsetup fixes the following issues: Changes in cryptsetup: - Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refa…
first Jul 13, 2026 -
Medium max 5.9SUSE-SU-2026:22599-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …
first Jul 13, 2026 -
High max 7.1SUSE-SU-2026:22597-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:22596-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
Medium max 5.4SUSE-SU-2026:22594-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22593-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
Critical max 9.1SUSE-SU-2026:22592-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 10, 2026 -
High max 8.8SUSE-SU-2026:22591-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 7.8SUSE-SU-2026:22590-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7SUSE-SU-2026:22589-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
Medium max 5.5openSUSE-SU-2026:11280-1 1 CVE
nm-configurator-0.3.5-2.1 on GA media
These are all security issues fixed in the nm-configurator-0.3.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Medium max 6.5openSUSE-SU-2026:11278-1 1 CVE
hostapd-2.11-4.1 on GA media
These are all security issues fixed in the hostapd-2.11-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.5openSUSE-SU-2026:11277-1 1 CVE
grafana-12.4.5-1.1 on GA media
These are all security issues fixed in the grafana-12.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11286-1 1 CVE
python315-3.15.0~b3-2.1 on GA media
These are all security issues fixed in the python315-3.15.0~b3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.1openSUSE-SU-2026:11284-1 3 CVEs
python313-langsmith-0.10.3-1.1 on GA media
These are all security issues fixed in the python313-langsmith-0.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11283-1 6 CVEs
python313-Pillow-12.3.0-2.1 on GA media
These are all security issues fixed in the python313-Pillow-12.3.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Critical max 9.8openSUSE-SU-2026:11281-1 4 CVEs
opennlp-1.9.5-1.1 on GA media
These are all security issues fixed in the opennlp-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026