35,648 results · Feed
-
High max 8.6SUSE-SU-2026:22152-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
Low max 3.7openSUSE-SU-2026:20985-1 1 CVE
Security update for hostapd
This update for hostapd fixes the following issues: Changes in hostapd: - bsc#1268083 - hostapd segmentation fault during fast restart cycles. - CVE-2025-24912: hostapd fails to process crafted RADIUS packets properly (bsc#1239461)
first Jun 15, 2026 -
High max 7.5openSUSE-SU-2026:20976-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 17, 2026 -
High max 7.5
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …
first Jun 17, 2026 -
High max 7.5openSUSE-SU-2026:20973-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…
first Jun 17, 2026 -
High max 8.6openSUSE-SU-2026:20972-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…
first Jun 17, 2026 -
High max 8.8openSUSE-SU-2026:20970-1 10 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 16, 2026 -
Low max 3.9openSUSE-SU-2026:20967-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
High max 8.6openSUSE-SU-2026:20966-1 1 CVE
Security update for editorconfig-core-c
This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: l_pattern buffer overflow (bsc#1262131).
first Jun 15, 2026 -
Critical max 9.8openSUSE-SU-2026:20965-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
High max 7.5SUSE-SU-2026:22224-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22221-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22220-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22216-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:22213-1 11 CVEs
Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…
first Jun 18, 2026 -
High max 8.4SUSE-SU-2026:22186-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant (DAG) flow (bsc#1266662). Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: * Update cargo vet audits …
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22185-1 5 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues - CVE-2026-27851: lib-var-expand: safe filter leaks to all following pipelines (bsc#1265146). - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-4001…
first Jun 19, 2026 -
High max 8.4SUSE-SU-2026:22182-1 1 CVE
Security update for papers
This update for papers fixes the following issues Security issue: - CVE-2026-46529: command injection (bsc#1265880). Changes for papers: - Update to version 48.10 (bsc#1265880): - Update to version 48.9 (jsc#PED-15957, bsc#1261947): - Bug fixes: - Saved image…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22181-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
first Jun 19, 2026 -
UnscoredSUSE-SU-2026:22180-1 0 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB …
first Jun 19, 2026 -
High max 8.1SUSE-SU-2026:22178-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22177-1 8 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 19, 2026 -
High max 7.8SUSE-SU-2026:22175-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 19, 2026 -
High max 7.3SUSE-SU-2026:22174-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
first Jun 19, 2026 -
Medium max 6.9SUSE-SU-2026:22173-1 11 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial of service (bsc#1261320). - CVE-2026-34513: unbounded DNS cache can cause a denial of service (bsc#1261321). - CVE-2026-34514: …
first Jun 19, 2026 -
High max 8.8SUSE-SU-2026:22172-1 7 CVEs
Security update for zypper, libzypp, libsolv
This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available (jsc#PED-13680, jsc#PED-15607) On a transactional system where the r…
first Jun 19, 2026 -
High max 7.8SUSE-SU-2026:22171-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issue - CVE-2026-11332: argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).
first Jun 19, 2026 -
High max 7.4SUSE-SU-2026:22170-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 19, 2026 -
High max 7.5SUSE-SU-2026:22168-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
first Jun 18, 2026 -
High max 8.2SUSE-SU-2026:22167-1 1 CVE
Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).
first Jun 18, 2026 -
High max 7.8SUSE-SU-2026:22166-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 18, 2026 -
High max 7.4SUSE-SU-2026:22165-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 18, 2026 -
Critical max 10.0SUSE-SU-2026:22157-1 21 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:22154-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:22153-1 20 CVEs
Security update for libheif
This update for libheif fixes the following issues Update to 1.23.0: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage: overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735). - CVE-2026-3949: manipulation of the argument siz…
first Jun 17, 2026 -
High max 7.5
Security update for python-starlette
This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:22149-1 10 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…
first Jun 16, 2026 -
Critical max 9.1openSUSE-SU-2026:11100-1 5 CVEs
python312-3.12.13-6.1 on GA media
These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Low max 3.7openSUSE-SU-2026:11099-1 3 CVEs
python311-python-multipart-0.0.32-1.1 on GA media
These are all security issues fixed in the python311-python-multipart-0.0.32-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 6.6openSUSE-SU-2026:11097-1 5 CVEs
python311-aiohttp-3.14.1-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026