35,648 results · Feed
-
Critical max 9.8SUSE-SU-2026:2630-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after…
first Jun 25, 2026 -
High max 7.4SUSE-SU-2026:2627-1 4 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 25, 2026 -
Medium max 5.0openSUSE-SU-2026:11125-1 1 CVE
tar-1.35-8.1 on GA media
These are all security issues fixed in the tar-1.35-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 8.4openSUSE-SU-2026:11124-1 3 CVEs
python311-pdm-2.28.0-1.1 on GA media
These are all security issues fixed in the python311-pdm-2.28.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 7.5openSUSE-SU-2026:11123-1 1 CVE
jupyter-nbclassic-1.3.3-2.1 on GA media
These are all security issues fixed in the jupyter-nbclassic-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
High max 7.8openSUSE-SU-2026:11122-1 5 CVEs
glances-common-4.5.5-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 25, 2026 -
Medium max 6.2SUSE-SU-2026:2625-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue - CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:2624-1 7 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues Update to version jdk8u492: Security issues: - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490). - CVE-2026-22013: unauthenticated attacker with…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2623-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2622-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3950: manipulation of the component st…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2621-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 24, 2026 -
Low max 2.5SUSE-SU-2026:2620-1 1 CVE
Security update for iproute2
This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Other updates: - support display of bound but unconnected sockets (bsc#1204562)
first Jun 24, 2026 -
High max 7.1SUSE-SU-2026:2619-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issues Security issues: - CVE-2025-64720: buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159). Non security issue: - version update to 1.5.30 (jsc#PED-16191). Changes…
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:2617-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-5946: Inval…
first Jun 24, 2026 -
Medium max 4.1SUSE-SU-2026:2615-1 1 CVE
Security update for tar
This update for tar fixes the following issues: Upgrade tar to version 1.34 (jsc#PED-16073). Security issues fixed: - CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Other updates and bugfixes: * Changes from 1.28…
first Jun 24, 2026 -
High max 8.1SUSE-SU-2026:2613-1 5 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066). - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026…
first Jun 24, 2026 -
High max 7.5SUSE-SU-2026:2616-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-5946: Inval…
first Jun 24, 2026 -
High max 8.8SUSE-SU-2026:2614-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 24, 2026 -
Critical max 10.0SUSE-SU-2026:2612-1 22 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues Security issues: - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603). - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/…
first Jun 24, 2026 -
Critical max 10.0SUSE-SU-2026:2611-1 16 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603). - CVE-2026-39827: Update golang.org/x/crypto dep…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:2610-1 6 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…
first Jun 24, 2026 -
Critical max 10.0SUSE-SU-2026:2609-1 19 CVEs
Security update for apptainer
This update for apptainer fixes the following issues - CVE-2026-24137: github.com/sigstore/sigstore/pkg/tuf: legacy TUF client allows for arbitrary file writes with target cache path traversal (bsc#1264177). - CVE-2026-33186: google.golang.org/grpc: authoriza…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:2608-1 5 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.103 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanou…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:2607-1 5 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 24, 2026 -
Critical max 9.8SUSE-SU-2026:2603-1 4 CVEs
Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2601-1 5 CVEs
Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 23, 2026 -
Critical max 9.1openSUSE-SU-2026:20986-1 2 CVEs
Security update for perl-Crypt-SaltedHash
This update for perl-Crypt-SaltedHash fixes the following issues: Changes in perl-Crypt-SaltedHash: updated to 0.110.0 (0.11) * 0.11 2026-05-20 14:05:07+01:00 Europe/London - Fixed metadata - Moved author tests into xt * 0.10 2026-05-19 - Maintenance taken ov…
first Jun 15, 2026 -
Medium max 6.5openSUSE-SU-2026:20984-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: * Fix multiple issues when parsing HTML files (bsc#1267153): CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506
first Jun 15, 2026 -
High max 7.5openSUSE-SU-2026:20977-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 17, 2026 -
Critical max 9.1openSUSE-SU-2026:20969-1 6 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Changes in google-guest-agent: Update to version 20260430.00 * Update OWNERS (#609) * Update THIRD_PARTY_LICENSES to be package specific location. (#608) * Update dependencies and go version to 1.…
first Jun 15, 2026 -
High max 8.8openSUSE-SU-2026:20974-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3949: manipulation of the argument siz…
first Jun 17, 2026 -
High max 7.8SUSE-SU-2026:22218-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 8.8SUSE-SU-2026:22184-1 9 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22183-1 8 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22163-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:22160-1 11 CVEs
Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…
first Jun 18, 2026 -
Critical max 10.0SUSE-SU-2026:22159-1 16 CVEs
Security update for distribution
This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Pun…
first Jun 18, 2026 -
Medium max 5.3SUSE-SU-2026:22158-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Jun 18, 2026 -
High max 7.5SUSE-SU-2026:22156-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:22155-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 17, 2026