35,648 results · Feed
-
High max 8.7openSUSE-SU-2026:11222-1 8 CVEs
keylime-ima-policy-0.2.9+49-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.9+49-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2026 -
Critical max 9.1openSUSE-SU-2026:11208-1 6 CVEs
tomcat-9.0.119-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.119-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.1openSUSE-SU-2026:11207-1 1 CVE
libsuricata8_0_5-8.0.5-2.1 on GA media
These are all security issues fixed in the libsuricata8_0_5-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.2openSUSE-SU-2026:11206-1 1 CVE
sccache-0.16.0~0-2.1 on GA media
These are all security issues fixed in the sccache-0.16.0~0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.2openSUSE-SU-2026:11205-1 1 CVE
rustup-1.28.2~0-4.1 on GA media
These are all security issues fixed in the rustup-1.28.2~0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Low max 2.1openSUSE-SU-2026:11204-1 1 CVE
ruby4.0-rubygem-uri-1.1.1-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:11203-1 2 CVEs
python313-httplib2-0.32.0-1.1 on GA media
These are all security issues fixed in the python313-httplib2-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 7.1openSUSE-SU-2026:11202-1 1 CVE
python313-Protego-0.6.2-1.1 on GA media
These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Medium max 5.9openSUSE-SU-2026:11201-1 1 CVE
pam-1.7.2+git12-2.1 on GA media
These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 8.2openSUSE-SU-2026:11200-1 3 CVEs
heroic-games-launcher-2.22.0-4.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.22.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Critical max 9.6openSUSE-SU-2026:11199-1 2 CVEs
go-sendxmpp-0.16.0-1.1 on GA media
These are all security issues fixed in the go-sendxmpp-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Critical max 9.8openSUSE-SU-2026:11198-1 7 CVEs
cosign-3.1.1-1.1 on GA media
These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
Medium max 6.5openSUSE-SU-2026:11197-1 1 CVE
apptainer-1.5.1-3.1 on GA media
These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 7, 2026 -
High max 8.7SUSE-SU-2026:2804-1 3 CVEs
Security update for kubevirt
This update for kubevirt fixes the following issues: - CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files (TLS keys, tokens, service-account creds) from the exporter pod. (bsc#1266733) - …
first Jul 8, 2026 -
High max 7.5SUSE-SU-2026:2803-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.565.g682306ec5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2793-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in `BitmapScaleBitmaps` can lead to a heap buffer overflow (bsc#1269018). - CVE-2026-56002: insufficient checks in `pcfReadFont` can lead to a heap buffer overflow (bsc#12…
first Jul 8, 2026 -
Critical max 9.0SUSE-SU-2026:2791-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
first Jul 8, 2026 -
Critical max 9.0SUSE-SU-2026:2789-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
first Jul 8, 2026 -
Critical max 9.0SUSE-SU-2026:2788-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…
first Jul 8, 2026 -
Critical max 9.0SUSE-SU-2026:2787-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
first Jul 8, 2026 -
Critical max 9.0SUSE-SU-2026:2786-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…
first Jul 8, 2026 -
Medium max 6.4SUSE-SU-2026:2785-1 1 CVE
Security update for systemd, systemd-mini
This update for systemd, systemd-mini fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit eba1930de8 (bsc#1267647). - Import co…
first Jul 8, 2026 -
High max 8.7SUSE-SU-2026:2783-1 3 CVEs
Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues: - CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files (TLS keys, tokens, service-account creds) from the exporter pod. (bsc#1266733…
first Jul 7, 2026 -
UnscoredopenSUSE-SU-2026:21267-1 0 CVEs
Recommended update for mpv, libKPipeWireRecord6, ffmpegthumbs-kf5
This update for mpv, libKPipeWireRecord6, ffmpegthumbs-kf5 fixes the following issues:
first Jul 7, 2026 -
Critical max 9.8openSUSE-SU-2026:21254-1 24 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go1.26.4 (bsc#1255111). Security issues fixed: - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption a…
first Jul 7, 2026 -
High max 7.5openSUSE-SU-2026:21218-1 1 CVE
Security update for perl-List-SomeUtils-XS
This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).
first Jul 6, 2026 -
High max 8.7SUSE-SU-2026:2802-1 18 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issue This update for netty, netty-tcnative fixes the following issues Upgrade netty to upstream version 4.1.135, netty-tcnative to upstream version 2.0.79: - CVE-2026-44249: IPv6 Subnet Filter Bypass …
first Jul 8, 2026 -
High max 8.1SUSE-SU-2026:2801-1 4 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic …
first Jul 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764). - CVE-2025-40341: futex: Don't leak robust_list poi…
first Jul 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290). - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr…
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2794-1 3 CVEs
Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in `BitmapScaleBitmaps` can lead to a heap buffer overflow (bsc#1269018). - CVE-2026-56002: insufficient checks in `pcfReadFont` can lead to a heap buffer overflow (bsc#12…
first Jul 8, 2026 -
High max 8.5SUSE-SU-2026:2792-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issue - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
first Jul 8, 2026 -
High max 7.5SUSE-SU-2026:2782-1 2 CVEs
Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues - CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546). - CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter …
first Jul 6, 2026 -
Medium max 5.3SUSE-SU-2026:2758-1 2 CVEs
Security update for python-pip
This update for python-pip fixes the following issues - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442).
first Jul 3, 2026 -
Medium max 6.8SUSE-SU-2026:2757-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).
first Jul 3, 2026 -
Medium max 6.1SUSE-SU-2026:2756-1 1 CVE
Security update for gimp
This update for gimp fixes the following issue: - CVE-2026-4887: Memory disclosure and denial of service via specially crafted PCX image (bsc#1260837).
first Jul 3, 2026 -
Medium max 6.8SUSE-SU-2026:2755-1 1 CVE
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2754-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2752-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issue - CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 3, 2026 -
High max 8.6SUSE-SU-2026:22510-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026