35,648 results · Feed
-
Critical max 9.6openSUSE-SU-2026:21060-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
Medium max 6.8openSUSE-SU-2026:21059-1 3 CVEs
Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 (jsc#PED-14609): * Add base support for PKCS#11 v3.2. * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]. * Add support for PKCS#11 v3.2 C_Encapsulat…
first Jun 25, 2026 -
High max 7.7openSUSE-SU-2026:21058-1 26 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues Update to 22.23.0: - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479). - CVE-2026-9496: pacote: excessive CPU consump…
first Jun 25, 2026 -
High max 7.5openSUSE-SU-2026:21053-1 3 CVEs
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389). - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.…
first Jun 24, 2026 -
Medium max 6.9openSUSE-SU-2026:21048-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).
first Jun 24, 2026 -
Medium max 6.5openSUSE-SU-2026:21045-1 1 CVE
Security update for perl-libwww-perl
This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: authorization and proxy-authorization headers are leaked on cross-origin redirects (bsc#1265156).
first Jun 24, 2026 -
Low max 2.7openSUSE-SU-2026:21044-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
UnscoredopenSUSE-SU-2026:21040-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issues: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823) - rescan-scsi-bus.sh: quote $id_serial in findmultipath call (bsc#1268201)
first Jun 23, 2026 -
High max 8.8openSUSE-SU-2026:21038-1 8 CVEs
Security update for 7zip
This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858). - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (…
first Jun 23, 2026 -
Low max 2.1openSUSE-SU-2026:21024-1 1 CVE
Security update for sed
This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).
first Jun 22, 2026 -
High max 7.4openSUSE-SU-2026:21023-1 3 CVEs
Security update for libexif
This update for libexif fixes the following issues - CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755). - CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#126200…
first Jun 22, 2026 -
Medium max 5.9openSUSE-SU-2026:21021-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
first Jun 22, 2026 -
Low max 3.7openSUSE-SU-2026:21020-1 1 CVE
Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062).
first Jun 22, 2026 -
UnscoredopenSUSE-SU-2026:21019-1 0 CVEs
Security update for rpcbind
This update for rpcbind fixes the following issues - Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/ * rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist() * rpcbind: Stop unauthenti…
first Jun 22, 2026 -
High max 7.2openSUSE-SU-2026:21017-1 1 CVE
Security update for python-click
This update for python-click fixes the following issue - CVE-2026-7246: Arbitrary command execution via command injection in click.edit() (bsc#1263898).
first Jun 22, 2026 -
Low max 3.7openSUSE-SU-2026:21016-1 6 CVEs
Security update for mutt
This update for mutt fixes the following issues - CVE-2026-43859: `strfcpy` used instead of `memcpy` for the IMAP `auth_cram` MD5 digest (bsc#1263897). - CVE-2026-43860: truncation of `hash_passwd` by one byte for IMAP `auth_cram` MD5 digest (bsc#1263896). - …
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21015-1 18 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content (bsc#1261236). - CVE-2026-0397: CORS misconfiguration can lead to information disclosure (bsc#1261237). - CVE-2026-24028: crafted DNS resp…
first Jun 22, 2026 -
Medium max 6.5openSUSE-SU-2026:21014-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the…
first Jun 22, 2026 -
Critical max 9.6openSUSE-SU-2026:21013-1 2 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues Update to version 1.103.2: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265843). - CVE-2026-39821: golang.org/x/net/idna: fa…
first Jun 22, 2026 -
High max 8.6openSUSE-SU-2026:21012-1 1 CVE
Security update for perl-Config-IniFiles
This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).
first Jun 22, 2026 -
Critical max 9.6openSUSE-SU-2026:21010-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCI…
first Jun 22, 2026 -
Critical max 9.1openSUSE-SU-2026:21005-1 15 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: …
first Jun 22, 2026 -
High max 7.5openSUSE-SU-2026:21004-1 1 CVE
Security update for gsasl
This update for gsasl fixes the following issues: Changes in gsasl: - CVE-2026-48829: DIGEST-MD5: Fix NULL pointer dereference in parser (bsc#1266371)
first Jun 22, 2026 -
High max 7.8openSUSE-SU-2026:20995-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278). - CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411). Non security issue…
first Jun 21, 2026 -
Critical max 9.6openSUSE-SU-2026:20994-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
High max 7.7SUSE-SU-2026:22286-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:22285-1 4 CVEs
Security update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-…
first Jun 25, 2026 -
High max 8.1SUSE-SU-2026:22284-1 2 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues - CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). - CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22283-1 7 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22282-1 6 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22281-1 6 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22280-1 7 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22279-1 7 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22278-1 7 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22277-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:22276-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 25, 2026 -
High max 7.5SUSE-SU-2026:22273-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.722.gdd9d67ff5: * fix(network-legacy): sanitize DHCP values in dhclient-sc…
first Jun 24, 2026 -
Medium max 4.0SUSE-SU-2026:22270-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue - CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
first Jun 24, 2026 -
Low max 2.7SUSE-SU-2026:22268-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multipl…
first Jun 24, 2026 -
UnscoredSUSE-SU-2026:22266-1 0 CVEs
Security update for sg3_utils
This update for sg3_utils fixes the following issues: - sg_inq: --export output conformance for SCSI name string and ATA fields (bsc#1267823) - rescan-scsi-bus.sh: quote $id_serial in findmultipath call (bsc#1268201)
first Jun 23, 2026