35,648 results · Feed
-
UnscoredSUSE-SU-2026:2821-1 0 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service (bsc#1268597).
first Jul 9, 2026 -
UnscoredSUSE-SU-2026:2820-1 0 CVEs
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD (PCD) file can cause memory corruption (bsc#1269891).
first Jul 9, 2026 -
Medium max 4.8SUSE-SU-2026:2819-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues - CVE-2026-48588: potential exposure of private data via cached `Set-Cookie` response (bsc#1271029). - CVE-2026-53877: information disclosure via 32-byte heap buffer overread in `GDALRaster` (bsc#127103…
first Jul 9, 2026 -
High max 7.8SUSE-SU-2026:2818-1 2 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111) - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).
first Jul 9, 2026 -
Medium max 6.4SUSE-SU-2026:2809-1 1 CVE
Security update for systemd
This update for systemd fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 37508f8ec1 (bsc#1267647). - Import commit c7530fbea…
first Jul 9, 2026 -
High max 8.7SUSE-SU-2026:2807-1 8 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…
first Jul 9, 2026 -
High max 7.0SUSE-RU-2026:2816-1 1 CVE
Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-
This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-…
first Jul 9, 2026 -
Medium max 6.5SUSE-RU-2026:2815-1 1 CVE
Recommended update for apptainer
This update for apptainer contains the following fixes: Security fixes included on this update: - CVE-2026-2303: go.mongodb.org/mongo-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1270529). Other fixes: - Enable building of SUID starter for SL…
first Jul 9, 2026 -
Critical max 9.8SUSE-SU-2026:21230-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…
first Apr 20, 2026 -
High max 8.7openSUSE-SU-2026:21263-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-49852: HS256/HS384/HS512 verify accepts empty/nil HMAC key (bsc#1270234)
first Jul 6, 2026 -
UnscoredSUSE-SU-2026:22518-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_26
This update for kernel-livepatch-MICRO-6-0_Update_26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26
first Jul 6, 2026 -
High max 7.5openSUSE-SU-2026:21262-1 6 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.0.1 (bsc#1269433, CVE-2026-48702): * bump go to 1.26.4 to squash CVE noise * Full v2 Release notes: https://github.com/hauler- dev/hauler/releases/tag/v2.0.0 - update to 2.0.0…
first Jul 6, 2026 -
Critical max 9.6openSUSE-SU-2026:21241-1 4 CVEs
Security update for buildah
This update for buildah fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39829: golang.org/x/crypto/ssh: pa…
first Jul 6, 2026 -
High max 7.6openSUSE-SU-2026:21240-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2026-53705: wavpackdec: Avoid integer overflow when calculating output buffer size and related fixes (bsc#1268449).
first Jul 6, 2026 -
High max 7.5openSUSE-SU-2026:21239-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).
first Jul 5, 2026 -
Medium max 5.0openSUSE-SU-2026:21238-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
first Jul 5, 2026 -
High max 7.3SUSE-SU-2026:22523-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: …
first Jul 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: fix…
first Jul 6, 2026 -
UnscoredSUSE-SU-2026:22517-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_26
This update for kernel-livepatch-MICRO-6-0-RT_Update_26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26
first Jul 6, 2026 -
Critical max 10.0SUSE-SU-2026:22516-1 22 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39827: Invoking memory le…
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:22515-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jul 3, 2026 -
Medium max 6.5SUSE-SU-2026:22514-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issue - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 3, 2026 -
Critical max 9.6SUSE-SU-2026:22513-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jul 2, 2026 -
Critical max 9.8SUSE-SU-2026:22117-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:22043-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Critical max 9.8SUSE-SU-2026:21834-1 206 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420). - CVE-2025-40181:…
first May 28, 2026 -
High max 7.8SUSE-SU-2026:21833-1 6 CVEs
Security update for vim
This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes (bsc#1261833). - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in th…
first May 28, 2026 -
Critical max 9.8SUSE-SU-2026:21780-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206). - CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 …
first May 18, 2026 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013). - CVE-2026-46300: net: s…
first May 15, 2026 -
High max 8.8SUSE-SU-2026:21594-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely (bsc#1264450) - CVE-2026-43284: xfrm: esp: avoid in-place decr…
first May 12, 2026 -
High max 7.3SUSE-SU-2026:21518-1 1 CVE
Security update for build, product-composer
This update for build, product-composer fixes the following issues: Changes in build: - Support a new "IgnoreRebuild" config. - build-recipe-kiwi: * Add support for oci containers * Avoid needlessly compressing container images * Detect container images based…
first May 5, 2026 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algif_aead (bsc#1262573).
first May 2, 2026 -
Critical max 9.2SUSE-SU-2026:21136-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:20999-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…
first Apr 10, 2026 -
Medium max 6.7SUSE-SU-2026:20998-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can t…
first Apr 7, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…
first Mar 25, 2026 -
Medium max 5.4SUSE-SU-2026:20765-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
Critical max 9.8SUSE-SU-2026:20570-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Critical max 9.8SUSE-SU-2026:20564-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026