35,648 results · Feed
-
Critical max 10.0SUSE-SU-2026:22558-1 22 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:22557-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
Medium max 5.6openSUSE-SU-2026:11269-1 1 CVE
php8-8.5.8-1.1 on GA media
These are all security issues fixed in the php8-8.5.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Low max 3.7openSUSE-SU-2026:11267-1 1 CVE
libeverest-3.6.7-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 8.3openSUSE-SU-2026:11265-1 1 CVE
libpng12-0-1.2.59-6.1 on GA media
These are all security issues fixed in the libpng12-0-1.2.59-6.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.3openSUSE-SU-2026:11264-1 2 CVEs
gimp-3.2.4-2.1 on GA media
These are all security issues fixed in the gimp-3.2.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 8.6openSUSE-SU-2026:11263-1 3 CVEs
freerdp-3.28.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.28.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2994-1 7 CVEs
Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2992-1 7 CVEs
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2991-1 10 CVEs
Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43037: ip6_tunnel: cl…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2955-1 7 CVEs
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 14, 2026 -
Medium max 5.0SUSE-SU-2026:2954-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:2950-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jul 14, 2026 -
Medium max 6.5openSUSE-SU-2026:21351-1 3 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: - Add UI web assets as additional source tarball - Update to version 12.4.5 (jsc#PED-16512): * Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/…
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21342-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large Comma-Separated Selector Lists (bsc#1271187). - CVE-2026-49477: Regular Expression Denial of Service (ReDoS) via Selector Parser (bsc#1271188).
first Jul 14, 2026 -
High max 7.8openSUSE-SU-2026:21341-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 14, 2026 -
Medium max 6.2openSUSE-SU-2026:21336-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). - CVE-2026-55059: row setter utilizing dataWin…
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21333-1 2 CVEs
Security update for nasm
This update for nasm fixes the following issues - CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the obj_directive() function (bsc#1261986). - CVE-2026-6068: heap use after free vulnerability in response file processing …
first Jul 13, 2026 -
High max 7.0openSUSE-SU-2026:11268-1 3 CVEs
php-composer2-2.10.2-1.1 on GA media
These are all security issues fixed in the php-composer2-2.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.5openSUSE-SU-2026:21339-1 10 CVEs
Security update for python-mistune
This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in `formatting.py` can lead to DoS (bsc#1271117). - CVE-2026-59923: `HTMLRenderer.safe_url()` does not block percent-encoded javasc…
first Jul 14, 2026 -
Medium max 4.6openSUSE-SU-2026:21332-1 2 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).
first Jul 13, 2026 -
Low max 2.1openSUSE-SU-2026:21331-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). Changes for helm: - Update to version 3.21…
first Jul 13, 2026 -
Critical max 9.1openSUSE-SU-2026:21329-1 6 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.1openSUSE-SU-2026:21328-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.56. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control fl…
first Jul 13, 2026 -
Critical max 9.8openSUSE-SU-2026:11270-1 93 CVEs
python313-Django5-5.2.16-1.1 on GA media
These are all security issues fixed in the python313-Django5-5.2.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Critical max 9.1openSUSE-SU-2026:21327-1 6 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…
first Jul 13, 2026 -
UnscoredopenSUSE-SU-2026:21325-1 0 CVEs
Security update for cryptsetup
This update for cryptsetup fixes the following issues: Changes in cryptsetup: - Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refa…
first Jul 13, 2026 -
High max 7.5openSUSE-SU-2026:11272-1 2 CVEs
python313-slixmpp-1.16.0-2.1 on GA media
These are all security issues fixed in the python313-slixmpp-1.16.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
Critical max 9.8openSUSE-SU-2026:11271-1 1 CVE
python313-django-debug-toolbar-7.0.0-1.1 on GA media
These are all security issues fixed in the python313-django-debug-toolbar-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
UnscoredopenSUSE-SU-2026:21343-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: Changes in python-sqlparse: - GHSA-27jp-wm6q-gp25: Limit recursion during parsing of tuples. (bsc#1268597)
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:2993-1 5 CVEs
Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: preven…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2989-1 11 CVEs
Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). - CVE-2026-43037: ip6_tunnel: cl…
first Jul 14, 2026 -
Medium max 5.7SUSE-SU-2026:2984-1 1 CVE
Security update for python3-dulwich
This update for python3-dulwich fixes the following issues: - CVE-2026-47734: Do not honour receive.maxInputSize to bound received packs (bsc#1268138)
first Jul 14, 2026 -
Medium max 6.8SUSE-SU-2026:2981-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189). Changes for ucode-intel: - Intel CPU Microcode was updated to the 20260512 release (bsc#1265189). **New Platforms** | Processor | Step…
first Jul 14, 2026 -
High max 8.2SUSE-SU-2026:2983-1 5 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the `jvp_string_append()` and `jvp_string_copy_replace_bad` functions can lead to heap buffer overflow when evaluating untrusted jq queries (bsc#1262044). - CVE-2026-3394…
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2982-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect leads to open redirect (bsc#1268324).
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2977-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2976-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026 -
Medium max 5.9SUSE-SU-2026:2974-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…
first Jul 14, 2026 -
High max 8.6SUSE-SU-2026:2970-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jul 14, 2026