35,648 results · Feed
-
High max 7.2SUSE-SU-2026:22321-1 1 CVE
Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit() (bsc#1263898).
first Jun 22, 2026 -
Critical max 9.6SUSE-SU-2026:22320-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues Update to version 1.103.2: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265843). - CVE-2026-39821: golang.org/x/net/idna: fa…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:22319-1 18 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content (bsc#1261236). - CVE-2026-0397: CORS misconfiguration can lead to information disclosure (bsc#1261237). - CVE-2026-24028: crafted DNS resp…
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:22315-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:22313-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issues: Changes in gsasl: - CVE-2026-48829: DIGEST-MD5: Fix NULL pointer dereference in parser (bsc#1266371)
first Jun 22, 2026 -
High max 7.8SUSE-SU-2026:22306-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278). - CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411). Non security issue…
first Jun 21, 2026 -
Critical max 9.6SUSE-SU-2026:22305-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
Medium max 4.1SUSE-SU-2026:22300-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669).
first Jun 20, 2026 -
Medium max 4.3SUSE-SU-2026:22297-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22294-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:2721-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 055+suse.402.g2720eea: * fix(network-legacy): sanitize DHCP values in dhclient-scri…
first Jul 1, 2026 -
Critical max 9.8SUSE-SU-2026:2722-1 66 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68822: Input: alps - fix use-…
first Jul 1, 2026 -
High max 7.5SUSE-SU-2026:2720-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 055+suse.365.g79144c5: * fix(network-legacy): sanitize DHCP values in dhclient-scri…
first Jul 1, 2026 -
High max 8.6SUSE-SU-2026:2719-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial-of-service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: - Update to version 2.1.10+20260618.4bca25e3c1: - libcrmcommon: Add addi…
first Jul 1, 2026 -
Medium max 6.5SUSE-SU-2026:2718-1 5 CVEs
Security update for cups
This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). …
first Jul 1, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resour…
first Jun 30, 2026 -
Critical max 9.8SUSE-SU-2026:2195-1 69 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resourc…
-
High max 7.7openSUSE-SU-2026:11161-1 1 CVE
radvd-2.21-1.1 on GA media
These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 8.4openSUSE-SU-2026:11163-1 1 CVE
libxreaderdocument3-4.6.5-1.1 on GA media
These are all security issues fixed in the libxreaderdocument3-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 7.0openSUSE-SU-2026:11162-1 2 CVEs
trivy-0.71.2-2.1 on GA media
These are all security issues fixed in the trivy-0.71.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 7.5openSUSE-SU-2026:11160-1 1 CVE
python311-pydata-sphinx-theme-0.19.0-2.1 on GA media
These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Critical max 9.3openSUSE-SU-2026:11159-1 1 CVE
python311-jupyter-server-2.20.0-1.1 on GA media
These are all security issues fixed in the python311-jupyter-server-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 7.5openSUSE-SU-2026:11158-1 2 CVEs
perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media
These are all security issues fixed in the perl-JavaScript-Minifier-XS-0.160.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 6.5openSUSE-SU-2026:11157-1 1 CVE
perl-CSS-Minifier-XS-0.140.0-1.1 on GA media
These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 5.4openSUSE-SU-2026:11156-1 1 CVE
libnghttp2-14-1.69.0-2.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.69.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 7.5openSUSE-SU-2026:11155-1 1 CVE
kbfs-6.6.3-2.1 on GA media
These are all security issues fixed in the kbfs-6.6.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 7.5openSUSE-SU-2026:11154-1 1 CVE
hauler-2.0.1-1.1 on GA media
These are all security issues fixed in the hauler-2.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 8.6SUSE-SU-2026:2709-1 1 CVE
Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).
first Jun 30, 2026 -
Critical max 9.6openSUSE-SU-2026:11153-1 4 CVEs
cadvisor-0.60.3-1.1 on GA media
These are all security issues fixed in the cadvisor-0.60.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
Medium max 6.5openSUSE-SU-2026:11152-1 1 CVE
amfora-1.11.0-3.1 on GA media
These are all security issues fixed in the amfora-1.11.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 30, 2026 -
High max 8.6SUSE-SU-2026:2716-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 30, 2026 -
Critical max 9.1SUSE-SU-2026:2715-1 5 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release. - CVE-2026-34986: Update github.com/go-jose/go-jose/v3+v4 dependency (bsc#1262856). - CVE-2026-39829, CVE-2026-39830, CVE-2026-42508, CVE-2026-46598: Update golang.org/x/crypto/ssh de…
first Jun 30, 2026 -
Medium max 5.0SUSE-SU-2026:2714-1 1 CVE
Security update for tar
This update for tar fixes the following issues Security fixes: - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). Other fixes: - Fix tar changing dir permissions temporarily even when using --no-overwrite-dir. - Fix --deref…
first Jun 30, 2026 -
Medium max 5.6SUSE-SU-2026:2713-1 2 CVEs
Security update for tracker
This update for tracker fixes the following issues: - CVE-2026-1765: heap buffer overflow vulnerability in `extract_txxx_tags` (bsc#1257607). - CVE-2026-1766: heap buffer overflow vulnerability in `get_id3v23_tags` (bsc#1257608).
first Jun 30, 2026 -
Low max 2.9SUSE-SU-2026:2712-1 1 CVE
Security update for xdg-desktop-portal
This update for xdg-desktop-portal fixes the following issue: - CVE-2026-40354: File deletion via symlink attack (bsc#1262045).
first Jun 30, 2026 -
High max 8.6SUSE-SU-2026:2710-1 1 CVE
Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).
first Jun 30, 2026 -
Critical max 10.0SUSE-SU-2026:2706-1 25 CVEs
Security update for buildah
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,gith…
first Jun 30, 2026 -
High max 7.5SUSE-SU-2026:2703-1 6 CVEs
Security update for curl
This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - C…
first Jun 30, 2026 -
Medium max 5.3SUSE-SU-2026:2702-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 30, 2026 -
High max 8.6SUSE-SU-2026:2701-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).
first Jun 30, 2026