35,648 results · Feed
-
Critical max 9.1openSUSE-SU-2026:11266-1 1 CVE
libpsl-devel-0.23.0-1.1 on GA media
These are all security issues fixed in the libpsl-devel-0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2026 -
High max 7.3SUSE-SU-2026:2987-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-5435: resolv: More types as unknown in ns_sprintrrf (bsc#1263656, BZ #34033) - resolv: Check for inet_ntop failure in ns_sprintrrf - CVE-2026-6238: resolv: Fix buffer overreads in ns_sprintrrf (bsc#…
first Jul 14, 2026 -
High max 8.7SUSE-SU-2026:2975-1 9 CVEs
Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-41677…
first Jul 14, 2026 -
High max 7.8SUSE-SU-2026:2969-1 15 CVEs
Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-5401: AFP dissector crash (bsc#1263756). - CVE-2026-5403: SBC audio codec crash (bsc#1263765). - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766). - CVE-2026-5406: FC-SWILS dissector crash …
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2968-1 2 CVEs
Security update for python-Authlib
This update for python-Authlib fixes the following issues - CVE-2026-41425: Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth (bsc#1263114). - CVE-2026-44681: Prior to 1.6.12 and 1.7.1, an unauthe…
first Jul 14, 2026 -
Medium max 6.2SUSE-SU-2026:2967-1 1 CVE
Security update for libgnt, meson, pidgin
This update for libgnt, meson, pidgin fixes the following issues Security issue: - CVE-2019-25544: denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation (b…
first Jul 14, 2026 -
UnscoredSUSE-SU-2026:2965-1 0 CVEs
Security update for kubernetes-old
This update for kubernetes-old rebuilds it against the current go security release.
first Jul 14, 2026 -
UnscoredSUSE-SU-2026:2964-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Jul 14, 2026 -
Medium max 6.8SUSE-SU-2026:2963-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189). Other changes: - Intel CPU Microcode was updated to the 20260512 release (bsc#1265189). **New Platforms** | Processor | Stepping | F-M…
first Jul 14, 2026 -
Medium max 6.5SUSE-SU-2026:2962-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: LWP: UserAgent: Authorization and Proxy-Authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jul 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-…
first Jul 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 14, 2026 -
Medium max 6.1SUSE-SU-2026:2949-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML input in `render_toc_ul` can lead to XSS (bsc#1265052).
first Jul 14, 2026 -
High max 7.5SUSE-SU-2026:2948-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jul 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 14, 2026 -
UnscoredSUSE-SU-2026:2942-1 0 CVEs
Security update for kubernetes
This update for kubernetes rebuilds it against the current go security release.
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2938-1 22 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix ou…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2937-1 20 CVEs
Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.205 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31533: net/tls: fix…
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:2931-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2961-1 22 CVEs
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix ou…
first Jul 14, 2026 -
Critical max 9.8SUSE-SU-2026:2933-1 23 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2932-1 20 CVEs
Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31533: net/tls: fix…
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2926-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2925-1 11 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2…
first Jul 13, 2026 -
High max 8.2SUSE-SU-2026:2924-1 6 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive (bsc#1263707). - CVE-2026-5260: heap overread when processing extremely short premas…
first Jul 13, 2026 -
High max 8.2SUSE-SU-2026:2923-1 6 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive (bsc#1263707). - CVE-2026-5260: heap overread when processing extremely short premas…
first Jul 13, 2026 -
Medium max 4.6SUSE-SU-2026:2922-1 3 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2920-1 21 CVEs
Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.173 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
High max 8.7SUSE-SU-2026:22554-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…
first Jul 9, 2026 -
Critical max 9.8SUSE-SU-2026:22553-1 10 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…
first Jul 8, 2026 -
Medium max 6.7SUSE-SU-2026:22550-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…
first Jul 7, 2026 -
Critical max 9.6SUSE-SU-2026:22546-1 4 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…
first Jul 7, 2026 -
High max 8.2SUSE-SU-2026:22545-1 11 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…
first Jul 7, 2026 -
High max 7.5SUSE-SU-2026:22544-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…
first Jul 7, 2026 -
Medium max 6.3SUSE-SU-2026:22542-1 1 CVE
Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…
first Jul 6, 2026 -
High max 7.3SUSE-SU-2026:22538-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 3, 2026 -
UnscoredSUSE-SU-2026:22537-1 0 CVEs
Security update for systemd
This update for systemd fixes the following issues: Changes in systemd: - Better handle TLS allocation failure (bsc#1254924). - Disable mounting `debugfs` by default (jsc#PED-8812). - Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#126…
first Jul 3, 2026 -
High max 8.1SUSE-SU-2026:2877-1 42 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder …
first Jul 13, 2026