35,648 results · Feed
-
Critical max 9.8SUSE-SU-2026:22509-1 6 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 29, 2026 -
Critical max 9.8SUSE-SU-2026:22508-1 6 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 29, 2026 -
Critical max 9.8SUSE-SU-2026:22507-1 7 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…
first Jun 29, 2026 -
Medium max 4.0SUSE-SU-2026:22506-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jul 1, 2026 -
High max 8.1SUSE-SU-2026:22504-1 4 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation (bsc#1268897). - CVE-…
first Jul 1, 2026 -
High max 7.5SUSE-SU-2026:22496-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). Changes for dnsmasq: * CVE-2026-12725, bsc#1268764: Heap buffer overflow in `l…
first Jun 29, 2026 -
High max 8.7SUSE-SU-2026:22495-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parse_link_text (bsc#1269091).
first Jun 29, 2026 -
High max 8.6SUSE-SU-2026:22493-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026 -
High max 7.5openSUSE-SU-2026:11196-1 1 CVE
python313-yt-dlp-2026.07.04-1.1 on GA media
These are all security issues fixed in the python313-yt-dlp-2026.07.04-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Critical max 9.1openSUSE-SU-2026:11195-1 6 CVEs
tomcat11-11.0.23-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 7.2openSUSE-SU-2026:11194-1 1 CVE
sdbootutil-1+git20260706.f9f4faf-1.1 on GA media
These are all security issues fixed in the sdbootutil-1+git20260706.f9f4faf-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 7.0openSUSE-SU-2026:11193-1 2 CVEs
librpmbuild10-4.20.1-8.1 on GA media
These are all security issues fixed in the librpmbuild10-4.20.1-8.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Critical max 9.8openSUSE-SU-2026:11192-1 1 CVE
python313-openapi-spec-validator-0.9.0-1.1 on GA media
These are all security issues fixed in the python313-openapi-spec-validator-0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
High max 8.2openSUSE-SU-2026:11191-1 1 CVE
python313-lxml_html_clean-0.4.5-1.1 on GA media
These are all security issues fixed in the python313-lxml_html_clean-0.4.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Critical max 9.8openSUSE-SU-2026:11190-1 2 CVEs
python313-dulwich-1.2.7-1.1 on GA media
These are all security issues fixed in the python313-dulwich-1.2.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Critical max 10.0openSUSE-SU-2026:11189-1 1 CVE
obs-service-appimage-0.12.4-1.1 on GA media
These are all security issues fixed in the obs-service-appimage-0.12.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Medium max 6.5openSUSE-SU-2026:11188-1 4 CVEs
json-c-devel-0.19-1.1 on GA media
These are all security issues fixed in the json-c-devel-0.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Low max 2.1openSUSE-SU-2026:11187-1 1 CVE
helm3-3.21.2-2.1 on GA media
These are all security issues fixed in the helm3-3.21.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Low max 2.1openSUSE-SU-2026:11186-1 1 CVE
helm-4.2.2-2.1 on GA media
These are all security issues fixed in the helm-4.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Medium max 6.1openSUSE-SU-2026:11185-1 1 CVE
gi-docgen-2026.1-1.1 on GA media
These are all security issues fixed in the gi-docgen-2026.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 6, 2026 -
Low max 3.7SUSE-SU-2026:2781-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jul 6, 2026 -
Low max 3.7SUSE-SU-2026:2780-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2779-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-5946: Inval…
first Jul 6, 2026 -
High max 7.2SUSE-SU-2026:2777-1 1 CVE
Security update for cryptsetup, s390-tools
This update for cryptsetup, s390-tools fixes the following issue Security fixes: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185). Changes for s390-tools: - Upgrade s390-tools to ver…
first Jul 6, 2026 -
Critical max 9.6SUSE-SU-2026:2774-1 18 CVEs
Security update 5.1.4 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.4 * Added note about migration for SUSE Linux Enterprise Server 16 on SSH managed minions * Product Migration from SUSE Linux Enterprise Server 15 SP7 t…
first Jul 6, 2026 -
Critical max 9.6SUSE-SU-2026:2768-1 22 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot updated to version 1.2.1: - Key Update Highlights (v1.2.1) - Added wait check for minion start (default 10s), configurable using rd.saltboot.salt_start_timeout option (bsc#1260870) - Decouple salt key wa…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2766-1 1 CVE
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 (bsc#1248707) golang-github-boynux-squid_exporter: - Non customer facing changes golang-gi…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2765-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2764-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.5SUSE-SU-2026:2763-1 3 CVEs
Security update 5.1.4 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/client_golang possible denial of service using InstrumentHandlerCounter (bsc#1248699) golang-github-lusitaniae-ap…
first Jul 6, 2026 -
High max 7.1SUSE-SU-2026:2760-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135). Changes for libnfs: - Add libnfs-CVE-2026-53689.patch: ZDR: check the string size for sanity (bsc#1268135 CVE-2026-5…
first Jul 6, 2026 -
Critical max 9.8SUSE-SU-2026:2759-1 13 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …
first Jul 6, 2026 -
Medium max 5.1SUSE-SU-2026:22302-1 2 CVEs
Security update for glycin-loaders
This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). - CVE-2025-58160: tracing-subscr…
-
Critical max 9.8openSUSE-SU-2026:11184-1 433 CVEs
chromedriver-150.0.7871.46-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.46-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 5, 2026 -
High max 7.3openSUSE-SU-2026:21228-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656). - CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialize…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:21231-1 1 CVE
Security update for python-pydata-sphinx-theme
This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - CVE-2026-13676: fast-uri: failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs allows for bypass (bsc#1269597) * revendor the vendore…
first Jul 3, 2026 -
High max 7.5openSUSE-SU-2026:21230-1 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-46604: TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset (bsc#1269600) - Update to version 6.6.3 * Various bug fixes
first Jul 3, 2026 -
Medium max 6.0openSUSE-SU-2026:21225-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: - Version 3.0.0 * Sec…
first Jul 3, 2026 -
UnscoredopenSUSE-SU-2026:21222-1 0 CVEs
Security update for systemd
This update for systemd fixes the following issues: Changes in systemd: - Better handle TLS allocation failure (bsc#1254924). - Disable mounting `debugfs` by default (jsc#PED-8812). - Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#126…
first Jul 3, 2026 -
High max 8.7openSUSE-SU-2026:11183-1 1 CVE
python313-joserfc-1.7.2-2.1 on GA media
These are all security issues fixed in the python313-joserfc-1.7.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2026