35,648 results · Feed
-
Medium max 6.5openSUSE-SU-2026:11279-1 2 CVEs
jackson-databind-2.18.9-2.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11276-1 1 CVE
gpsd-3.27.5-3.1 on GA media
These are all security issues fixed in the gpsd-3.27.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11275-1 4 CVEs
aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
High max 8.7openSUSE-SU-2026:11274-1 3 CVEs
agama-22+398.d23cf880d-49.1 on GA media
These are all security issues fixed in the agama-22+398.d23cf880d-49.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Medium max 6.9SUSE-SU-2026:3059-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jul 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set net…
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3063-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Jul 15, 2026 -
Critical max 10.0SUSE-SU-2026:3056-1 41 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3054-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 15, 2026 -
Critical max 9.1openSUSE-SU-2026:11282-1 1 CVE
perl-Mojolicious-9.480.0-1.1 on GA media
These are all security issues fixed in the perl-Mojolicious-9.480.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Low max 3.7openSUSE-SU-2026:11273-1 8 CVEs
ImageMagick-7.1.2.27-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3065-1 7 CVEs
Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3058-1 7 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971). - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence …
first Jul 15, 2026 -
Critical max 9.6SUSE-SU-2026:3057-1 11 CVEs
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issues - CVE-2022-41723: go1.19,go1.20: net/http2: quadratic complexity in HPACK decoding (bsc#1208300). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper vali…
first Jul 15, 2026 -
High max 7.7SUSE-SU-2026:3055-1 1 CVE
Security update for radvd
This update for radvd fixes the following issue - CVE-2026-48715: stack-based buffer overflow in the `radvdump` Route Information option parser when processing crafted ICMPv6 Router Advertisements (bsc#1268641).
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3053-1 15 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3046-1 8 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CV…
first Jul 15, 2026 -
High max 7.8openSUSE-SU-2026:11285-1 3 CVEs
python310-3.10.20-7.1 on GA media
These are all security issues fixed in the python310-3.10.20-7.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3052-1 0 CVEs
Security update for containerd
This update for containerd rebuilds it against the current go security release.
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3051-1 0 CVEs
Security update for runc
This update for runc rebuilds it against the current go security release.
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3050-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current go security release.
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3049-1 0 CVEs
Security update for distribution
This update for distribution rebuilds it against the current go security release.
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3048-1 0 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current go security release.
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3047-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#12710…
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3045-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
first Jul 15, 2026 -
Medium max 6.6SUSE-SU-2026:3042-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issue - Rebase the CVE-2026-42014 patch to include a missing call to `p11_kit_uri_free()` in `gnutls_pkcs11_token_set_pin()` (bsc#1263713).
first Jul 15, 2026 -
High max 8.3SUSE-SU-2026:3039-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issue - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Jul 15, 2026 -
Low max 3.4SUSE-SU-2026:3031-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3044-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145). - CVE-2026-43038: ipv6: …
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3043-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3041-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3040-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callba…
first Jul 15, 2026 -
Medium max 6.7SUSE-SU-2026:3038-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues - CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061). - CVE-2026-48004: heap use-after-free race condition allows a DoS by an unprivileged guest user (…
first Jul 15, 2026 -
High max 7.1SUSE-SU-2026:3037-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
High max 7.1SUSE-SU-2026:3036-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
High max 7.1SUSE-SU-2026:3035-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 15, 2026 -
Medium max 6.5SUSE-SU-2026:3033-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: LWP: UserAgent: Authorization and Proxy-Authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jul 15, 2026 -
Medium max 4.3SUSE-SU-2026:3032-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3030-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3029-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 15, 2026