35,648 results · Feed
-
Critical max 9.8SUSE-SU-2026:22384-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22383-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
High max 8.2SUSE-SU-2026:22382-1 1 CVE
Security update for giflib
This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
first Jun 28, 2026 -
Medium max 6.8SUSE-SU-2026:22381-1 1 CVE
Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).
first Jun 28, 2026 -
Low max 2.3SUSE-SU-2026:22380-1 1 CVE
Security update for loupe
This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation (bsc#1249009). Changes for loupe: - Update to version 48.2: - Check if the is-hidden prope…
first Jun 28, 2026 -
High max 7.5SUSE-SU-2026:22378-1 32 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues Security issues: - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048). - CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092). - CVE-2026-45031: Denial of Serv…
first Jun 26, 2026 -
Medium max 5.0SUSE-SU-2026:22377-1 2 CVEs
Security update for tar
This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
first Jun 26, 2026 -
Critical max 10.0SUSE-SU-2026:22376-1 15 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-39821: golang.org/x/net/idna: failure to rejec…
first Jun 26, 2026 -
High max 7.7SUSE-SU-2026:22373-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
High max 7.5SUSE-SU-2026:22372-1 4 CVEs
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling (bsc#1268506). - CVE-2026-53538: urlencoded requests containing semicolons can lead to fo…
first Jun 26, 2026 -
Medium max 6.1SUSE-SU-2026:22370-1 1 CVE
Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve
This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version (bsc#1268243) Changes…
first Jun 26, 2026 -
High max 7.6SUSE-SU-2026:22369-1 4 CVEs
Security update for libaom
This update for libaom fixes the following issues - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-plane pixel values ca…
first Jun 25, 2026 -
High max 7.7SUSE-SU-2026:22368-1 26 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues Update to 22.23.0: - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479). - CVE-2026-9496: pacote: excessive CPU consump…
first Jun 25, 2026 -
Critical max 9.6SUSE-SU-2026:22367-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
Medium max 6.8SUSE-SU-2026:22365-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
High max 8.1SUSE-SU-2026:22364-1 2 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). - CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).
first Jun 25, 2026 -
High max 7.1SUSE-SU-2026:22363-1 1 CVE
Security update for libnfs
This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server (bsc#1268135).
first Jun 25, 2026 -
High max 7.5SUSE-SU-2026:22358-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.722.gdd9d67ff5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jun 24, 2026 -
Medium max 6.9SUSE-SU-2026:22356-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Medium max 4.0SUSE-SU-2026:22355-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Medium max 6.5SUSE-SU-2026:22353-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: authorization and proxy-authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jun 24, 2026 -
Critical max 9.6SUSE-SU-2026:22351-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. …
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:22360-1 3 CVEs
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389). - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.…
first Jun 24, 2026 -
Low max 2.7SUSE-SU-2026:22352-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
UnscoredSUSE-SU-2026:22349-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issues: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823) - rescan-scsi-bus.sh: quote $id_serial in findmultipath call (bsc#1268201)
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:22347-1 8 CVEs
Security update for 7zip
This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858). - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (…
first Jun 23, 2026 -
Medium max 4.3SUSE-SU-2026:22344-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Non security issue: - Update to version 3.0.5 (jsc#SLE-23879).
first Jun 22, 2026 -
Medium max 5.5SUSE-SU-2026:22343-1 1 CVE
Security update for firewalld
This update for firewalld fixes the following issue - CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).
first Jun 22, 2026 -
Low max 3.7SUSE-SU-2026:22340-1 6 CVEs
Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: `strfcpy` used instead of `memcpy` for the IMAP `auth_cram` MD5 digest (bsc#1263897). - CVE-2026-43860: truncation of `hash_passwd` by one byte for IMAP `auth_cram` MD5 digest (bsc#1263896). - …
first Jun 22, 2026 -
Medium max 6.5SUSE-SU-2026:22338-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Low max 3.7SUSE-SU-2026:22335-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:22332-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
UnscoredSUSE-SU-2026:22331-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issues - Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/ * rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist() * rpcbind: Stop unauthenti…
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:22330-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957). - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).
first Jun 22, 2026 -
High max 8.6SUSE-SU-2026:22329-1 1 CVE
Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).
first Jun 22, 2026 -
Critical max 9.6SUSE-SU-2026:22328-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCI…
first Jun 22, 2026 -
High max 7.4SUSE-SU-2026:22324-1 3 CVEs
Security update for libexif
This update for libexif fixes the following issues - CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755). - CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#126200…
first Jun 22, 2026 -
Medium max 6.3SUSE-SU-2026:22326-1 1 CVE
Security update for keylime
This update for keylime fixes the following issue - CVE-2026-6420: use of hardcoded challenge nonce for TPM quote attestation allows for security bypass (bsc#1264265). Changes for keylime: - Update to version 7.14.2.
first Jun 22, 2026 -
Low max 2.1SUSE-SU-2026:22325-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
Medium max 5.9SUSE-SU-2026:22322-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026