35,648 results · Feed
-
Medium max 6.8SUSE-SU-2026:2645-1 3 CVEs
Security update for dovecot22
This update for dovecot22 fixes the following issues - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-40020: IMAP folders can be shared-spammed to everyone (bsc#1265149). - CVE-2026-42006: imap-login:…
first Jun 26, 2026 -
High max 7.5SUSE-SU-2026:2644-1 3 CVEs
Security update for frr
This update for frr fixes the following issues - CVE-2026-28532: Denial of Service due to integer overflow in OSPF TLV parser functions (bsc#1263859). - CVE-2026-37457: An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (…
first Jun 26, 2026 -
Medium max 5.3SUSE-SU-2026:2642-1 1 CVE
Security update for apache-commons-configuration2, apache-commons-text
This update for apache-commons-configuration2, apache-commons-text fixes the following issues - CVE-2026-45205: uncontrolled recursion leads to `StackOverflowError` when processing specially crafted configuration files (bsc#1265299). Changes for apache-common…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2640-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2…
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2639-1 4 CVEs
Security update for containerd
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2…
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:2638-1 21 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 26, 2026 -
Medium max 5.3SUSE-SU-2026:0906-2 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Jun 26, 2026 -
High max 8.2SUSE-SU-2026:2667-1 1 CVE
Security update for giflib
This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
first Jun 26, 2026 -
Critical max 9.8SUSE-SU-2026:2658-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 26, 2026 -
Medium max 5.0SUSE-SU-2026:2657-1 6 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper c…
first Jun 26, 2026 -
Medium max 6.0SUSE-SU-2026:2655-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970).
first Jun 26, 2026 -
Medium max 5.3SUSE-SU-2026:2654-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).
first Jun 26, 2026 -
Medium max 4.7SUSE-SU-2026:2653-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 26, 2026 -
High max 7.5SUSE-SU-2026:2652-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jun 26, 2026 -
High max 7.5SUSE-SU-2026:2651-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…
first Jun 26, 2026 -
High max 8.8SUSE-SU-2026:2648-1 13 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 26, 2026 -
Critical max 9.6SUSE-SU-2026:2643-1 6 CVEs
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues - CVE-2022-1996: CORS bypass (bsc#1200528). - CVE-2022-2385: aws-iam-authenticator AccessKeyID validation bypass (bsc#1201395). - CVE-2024-39689: remove root certificates from `GLOBALTRUST` from…
first Jun 26, 2026 -
Critical max 10.0SUSE-SU-2026:22249-1 22 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:22248-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…
first Jun 22, 2026 -
Medium max 5.1SUSE-SU-2026:22247-1 1 CVE
Security update for crun
This update for crun fixes the following issue - CVE-2026-47766: crun follows rootfs /dev symlink while creating default devices (bsc#1268302).
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:22246-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:22243-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 19, 2026 -
Critical max 10.0SUSE-SU-2026:22242-1 23 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533). - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity w…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:22241-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…
first Jun 18, 2026 -
High max 7.4SUSE-SU-2026:22238-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 16, 2026 -
Low max 2.1openSUSE-SU-2026:11120-1 1 CVE
nano-9.1-1.1 on GA media
These are all security issues fixed in the nano-9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 8.2openSUSE-SU-2026:11117-1 1 CVE
giflib-devel-32bit-5.2.2-4.1 on GA media
These are all security issues fixed in the giflib-devel-32bit-5.2.2-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 5.9openSUSE-SU-2026:11116-1 1 CVE
dnsmasq-2.93-1.1 on GA media
These are all security issues fixed in the dnsmasq-2.93-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 6.2openSUSE-SU-2026:11115-1 1 CVE
GraphicsMagick-1.3.47-3.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Critical max 9.1SUSE-SU-2026:2636-1 5 CVEs
Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-…
first Jun 25, 2026 -
High max 7.4SUSE-SU-2026:2626-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 25, 2026 -
High max 8.8SUSE-SU-2026:2628-1 2 CVEs
Security update for libzypp
This update for libzypp fixes the following issue - CVE-2026-25707: Handcrafted repo metadata may cause arbitrary local files to be overwritten (bsc#1259802). - CVE-2026-44942: Fixed possible path traversal attacks via .repo files 'path=' entries (bsc#1267874…
first Jun 25, 2026 -
Critical max 10.0openSUSE-SU-2026:11126-1 49 CVEs
velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 7.7openSUSE-SU-2026:11121-1 21 CVEs
corepack24-24.17.0-1.1 on GA media
These are all security issues fixed in the corepack24-24.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Critical max 9.8openSUSE-SU-2026:11119-1 14 CVEs
libeverest-3.6.6-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 8.1openSUSE-SU-2026:11118-1 3 CVEs
jackson-databind-2.18.8-1.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 5.3SUSE-SU-2026:2634-1 3 CVEs
Security update for python-pip
This update for python-pip fixes the following issues - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442). - CVE-2026-8643…
first Jun 25, 2026 -
High max 7.7SUSE-SU-2026:2633-1 21 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues Update to 24.17.0: - CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive so…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:2632-1 27 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-fr…
first Jun 25, 2026 -
Critical max 9.8SUSE-SU-2026:2631-1 21 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after…
first Jun 25, 2026