35,648 results · Feed
-
High max 8.7openSUSE-SU-2026:11262-1 7 CVEs
sdbootutil-1+git20260713.d869cf8-1.1 on GA media
These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2914-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616). - CVE-2026-23255: net: add proper RCU protection to /p…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2910-1 21 CVEs
Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.184 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2909-1 7 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfil…
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race cond…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2899-1 23 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race cond…
first Jul 13, 2026 -
Medium max 6.5SUSE-SU-2026:2886-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 12, 2026 -
Critical max 9.8SUSE-SU-2026:2890-1 23 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2889-1 21 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.40 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…
first Jul 13, 2026 -
Medium max 6.8SUSE-SU-2026:2885-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that can allow attackers to corrupt memory (bsc#1268853).
first Jul 13, 2026 -
Medium max 5.4SUSE-SU-2026:2883-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2868-1 23 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2867-1 21 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.167 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 13, 2026 -
Critical max 9.8SUSE-SU-2026:2888-1 20 CVEs
Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31533: net/tls: fix…
first Jul 13, 2026 -
High max 8.3SUSE-SU-2026:2878-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issue - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Jul 13, 2026 -
High max 7.5SUSE-SU-2026:2875-1 4 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-2026-54060: a font can trigger excessive allocation during conversion or saving (bsc#1270410). - CVE-20…
first Jul 13, 2026 -
Medium max 6.1openSUSE-SU-2026:21313-1 3 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response (bsc#1271029) - CVE-2026-53877: Heap buffer over-read in GDALRaster (bsc#1271030) - CVE-202…
first Jul 10, 2026 -
High max 7.7openSUSE-SU-2026:21312-1 1 CVE
Security update for python-pytest-html
This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor updating brace-expansion: - force brace-expansion minimum version to fix CVE-2026-13149 (bsc#1269923)
first Jul 10, 2026 -
High max 8.0openSUSE-SU-2026:21310-1 2 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.96.0: * Critical security fix: patched vulnerability in gh codespace jupyter that could allow command execution when connecting to malicious Codespaces * Merge commit from for…
first Jul 10, 2026 -
Low max 3.7openSUSE-SU-2026:21303-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM client can lead to memory disclosure (bsc#1268885).
first Jul 10, 2026 -
Medium max 5.4openSUSE-SU-2026:21302-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).
first Jul 10, 2026 -
UnscoredopenSUSE-SU-2026:21301-1 0 CVEs
Security update for dash
This update for dash fixes the following issues - CVE-2026-31323: Fix CVE-2026-31323 INTMAX_MIN / -1 overflow (bsc#1269494). - executes code even when noexec ("-n") is specified (bsc#1178978).
first Jul 10, 2026 -
Medium max 5.1openSUSE-SU-2026:21297-1 3 CVEs
Security update for uriparser
This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes (bsc#1262999). - CVE-2026-44927: truncation of `ptrdiff_t` to `int` in various place…
first Jul 10, 2026 -
High max 8.6openSUSE-SU-2026:21296-1 5 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-42311: malicious PSD file processing can lead to arbitrary code execution (bsc#1270404). - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409). - CVE-202…
first Jul 10, 2026 -
High max 7.1openSUSE-SU-2026:21295-1 1 CVE
Security update for yelp
This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21294-1 8 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac…
first Jul 10, 2026 -
Critical max 9.1openSUSE-SU-2026:21293-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an ini…
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21292-1 7 CVEs
Security update for agama
This update for agama fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270602). - CVE-2026-41678: openssl: incorrect bounds assertion in aes key w…
first Jul 10, 2026 -
High max 8.1openSUSE-SU-2026:21291-1 10 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read (bsc#1270073). - CVE-2026-53467: allocated memory left unchanged in the MNG decoder c…
first Jul 10, 2026 -
High max 8.8openSUSE-SU-2026:21290-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…
first Jul 10, 2026 -
High max 7.8openSUSE-SU-2026:21289-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large Sam…
first Jul 10, 2026 -
High max 8.7openSUSE-SU-2026:21285-1 8 CVEs
Security update for python-maturin
This update for python-maturin fixes the following issues - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback whe…
first Jul 10, 2026 -
High max 8.5openSUSE-SU-2026:21284-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018). - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019). - CVE-2026-56003: computeProps Property Buffe…
first Jul 10, 2026 -
Critical max 9.8SUSE-SU-2026:2864-1 21 CVEs
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race c…
first Jul 11, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of…
first Jul 11, 2026 -
Critical max 9.0openSUSE-SU-2026:21283-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memory manag…
first Jul 10, 2026