35,648 results · Feed
-
Medium max 5.9SUSE-SU-2026:3028-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…
first Jul 15, 2026 -
High max 7.3SUSE-SU-2026:3027-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3026-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 15, 2026 -
High max 8.8SUSE-SU-2026:3025-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3024-1 27 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: denial of Service due to resour…
first Jul 15, 2026 -
High max 8.1SUSE-SU-2026:3023-1 41 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: denial of Service due to resour…
first Jul 15, 2026 -
High max 8.7SUSE-SU-2026:3022-1 14 CVEs
Security update for sccache
This update for sccache fixes the following issues: Update to version 0.15.0~17. - CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes `HTTP2 RST_STREAM` frames (bsc#1210346). - CVE-2024-32650: rust-rustls: i…
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:3011-1 7 CVEs
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3064-1 0 CVEs
Security update for docker
This update for docker rebuilds it against the current go security release.
first Jul 15, 2026 -
Medium max 5.1SUSE-SU-2026:3021-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3009-1 3 CVEs
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set n…
first Jul 15, 2026 -
Critical max 9.1SUSE-SU-2026:3005-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 15, 2026 -
Medium max 5.9SUSE-SU-2026:3004-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …
first Jul 15, 2026 -
High max 7.8SUSE-SU-2026:3001-1 8 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43366: io_uring/kbuf:…
first Jul 15, 2026 -
UnscoredSUSE-SU-2026:3000-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
first Jul 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43037: ip6_tunnel: clea…
first Jul 15, 2026 -
Critical max 9.8SUSE-SU-2026:2995-1 7 CVEs
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
High max 7.3openSUSE-SU-2026:21346-1 8 CVEs
Security update for libredwg
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 * fix dwg_next_entity NULL pointer dereference [CVE-2026-15184, boo#1271170] * Fix dwg_bmp thumbnail overflow checks [CVE-2026-15181, boo#1271169] * Resol…
first Jul 13, 2026 -
High max 7.8openSUSE-SU-2026:21324-1 5 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…
first Jul 13, 2026 -
High max 7.8openSUSE-SU-2026:21321-1 2 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#127101…
first Jul 13, 2026 -
Medium max 5.9openSUSE-SU-2026:21320-1 1 CVE
Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the `pam_userdb` module's plaintext-password comparison (bsc#1268290).
first Jul 13, 2026 -
Critical max 9.8openSUSE-SU-2026:21319-1 30 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.…
first Jul 13, 2026 -
High max 7.1openSUSE-SU-2026:21318-1 4 CVEs
Security update for jq
This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jv_object_merge_recursive() can lead to C stack exhaustion and a process crash (bsc#1265075). - CVE-2026-44777: uncontrolled recursion in ordinary module loader when two va…
first Jul 13, 2026 -
High max 7.5SUSE-SU-2026:22587-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
Medium max 6.5openSUSE-SU-2026:21317-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service (bsc#1262719). - CVE-2026-11979: stack-based buffer overflows in the `xmlcatalog` utility when running in `--shell` mode (bsc#1269…
first Jul 13, 2026 -
High max 8.7SUSE-SU-2026:22583-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 9, 2026 -
Critical max 9.8SUSE-SU-2026:22582-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 8, 2026 -
Medium max 6.7SUSE-SU-2026:22576-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…
first Jul 7, 2026 -
Critical max 10.0SUSE-SU-2026:22575-1 26 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to version 1.17.0. Security issues fixed: - CVE-2026-25680: golang.org/x/net/html: parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service (bsc#1267185). - CVE-2026-…
first Jul 7, 2026 -
High max 7.5SUSE-SU-2026:22574-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues: Update to version 1.5.3. Security issues fixed: - CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning (bsc#1270107). - CVE-2026-20214: out-of-bounds wri…
first Jul 7, 2026 -
High max 7.5SUSE-SU-2026:22573-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issue: - CVE-2026-30997: out-of-bounds read in the `read_global_param()` function allows for a DoS via crafted input (bsc#1262047).
first Jul 7, 2026 -
Critical max 9.8SUSE-SU-2026:22572-1 24 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go1.26.4 (bsc#1255111). Security issues fixed: - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption a…
first Jul 7, 2026 -
Critical max 9.6SUSE-SU-2026:22567-1 4 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…
first Jul 7, 2026 -
High max 8.2SUSE-SU-2026:22566-1 11 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…
first Jul 7, 2026 -
High max 7.7SUSE-SU-2026:22565-1 21 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues Update to version 24.18.0 (bsc#1269825). Security issues fixed: - CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: response queue pois…
first Jul 6, 2026 -
Critical max 9.8SUSE-SU-2026:22564-1 13 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …
first Jul 6, 2026 -
UnscoredSUSE-SU-2026:22562-1 0 CVEs
Security update for jline3
This update for jline3 fixes the following issues: Changes in jline3: * unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables (bsc#1269021)
first Jul 6, 2026 -
Medium max 6.3SUSE-SU-2026:22561-1 1 CVE
Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:22559-1 1 CVE
Security update for perl-List-SomeUtils-XS
This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).
first Jul 6, 2026