35,648 results · Feed
-
High max 7.5SUSE-SU-2026:2748-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957).
first Jul 3, 2026 -
High max 7.5SUSE-SU-2026:2747-1 4 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928). - CVE-20…
first Jul 3, 2026 -
Critical max 10.0SUSE-SU-2026:2733-1 25 CVEs
Security update for buildah
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,gith…
first Jul 2, 2026 -
Medium max 6.5SUSE-SU-2026:2732-1 6 CVEs
Security update for cups
This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). …
first Jul 2, 2026 -
High max 7.5SUSE-SU-2026:2728-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jul 2, 2026 -
Medium max 5.5SUSE-SU-2026:2745-1 1 CVE
Security update for firewalld-legacy
This update for firewalld-legacy fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jul 3, 2026 -
High max 7.1SUSE-SU-2026:2744-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 3, 2026 -
High max 7.1SUSE-SU-2026:2743-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 3, 2026 -
Medium max 4.0openSUSE-SU-2026:21202-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).
first Jul 1, 2026 -
High max 8.1openSUSE-SU-2026:21201-1 4 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation (bsc#1268897). - CVE-…
first Jul 1, 2026 -
High max 8.6openSUSE-SU-2026:21196-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 29, 2026 -
High max 7.5openSUSE-SU-2026:21192-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). Changes for dnsmasq: * CVE-2026-12725, bsc#1268764: Heap buffer overflow in `l…
first Jun 29, 2026 -
High max 8.7openSUSE-SU-2026:21191-1 1 CVE
Security update for python-mistune
This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parse_link_text (bsc#1269091).
first Jun 29, 2026 -
Critical max 9.8openSUSE-SU-2026:21190-1 23 CVEs
Security update for openbabel
This update for openbabel fixes the following issues: Changes in openbabel: - Update to version 3.2.0: * Add an L-BFGS optimizer, used by default for gen3d and conformer searches * New macrocycle ring builder (Dale codes) for better initial 3D geometry of lar…
first Jul 1, 2026 -
Medium max 5.3openSUSE-SU-2026:21189-1 1 CVE
Security update for transmission
This update for transmission fixes the following issues: Changes in transmission: - CVE-2026-38978: add clickjack safeguards when serving http responses (bsc#1267404).
first Jul 1, 2026 -
High max 7.5SUSE-SU-2026:22431-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.609.g1a2492e: * fix(network-legacy): sanitize DHCP values in dhclient-scri…
first Jun 29, 2026 -
High max 7.7SUSE-SU-2026:22430-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
UnscoredSUSE-SU-2026:22429-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issue - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823).
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:22426-1 5 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …
first Jun 25, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…
first Jun 25, 2026 -
Critical max 9.6SUSE-SU-2026:22424-1 3 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a m…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22420-1 6 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix he…
first Jun 24, 2026 -
Medium max 5.9SUSE-SU-2026:22438-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).
first Jul 1, 2026 -
Medium max 5.9SUSE-SU-2026:22437-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).
first Jul 1, 2026 -
Critical max 9.8SUSE-SU-2026:22436-1 71 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68822: Input: alps…
first Jun 30, 2026 -
Critical max 9.8SUSE-SU-2026:22433-1 169 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-38549: efivarfs…
first Jun 30, 2026 -
Critical max 9.8SUSE-SU-2026:22428-1 5 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22427-1 5 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …
first Jun 25, 2026 -
Critical max 10.0SUSE-SU-2026:22423-1 15 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-39821: golang.org/x/net/idna: failure to rejec…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:22421-1 6 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix he…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:22419-1 6 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix he…
first Jun 24, 2026 -
Critical max 9.6SUSE-SU-2026:22432-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - update to 3.21.2: * chore(dep…
first Jun 29, 2026 -
High max 7.5SUSE-SU-2026:2673-1 6 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE…
first Jul 2, 2026 -
Medium max 6.5openSUSE-SU-2026:21216-1 1 CVE
Security update for libslirp
This update for libslirp fixes the following issue - CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).
first Jul 2, 2026 -
Critical max 9.1openSUSE-SU-2026:21211-1 7 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237). Changes for ffmpeg-7: - Update to version 7.1.4: * Codec, format, filter and various other bugfixes. *…
first Jul 2, 2026 -
Medium max 6.2openSUSE-SU-2026:21207-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
first Jul 2, 2026 -
Critical max 9.6openSUSE-SU-2026:21205-1 6 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTT…
first Jul 2, 2026 -
High max 7.1openSUSE-SU-2026:21204-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).
first Jul 2, 2026 -
High max 8.7openSUSE-SU-2026:11180-1 1 CVE
python311-mistune-3.3.2-1.1 on GA media
These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2026 -
Critical max 9.6openSUSE-SU-2026:21213-1 10 CVEs
Security update for containerd
This update for containerd fixes the following issues Update to 1.7.33: - CVE-2024-25621: overly broad default permission vulnerability (bsc#1253126). - CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host (bsc#1253132). - CVE-2026-33186:…
first Jul 2, 2026