35,648 results · Feed
-
Critical max 9.6SUSE-SU-2026:2583-1 29 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2590-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
Critical max 10.0SUSE-SU-2026:2581-1 22 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependenc…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2579-1 2 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2026-33997: Fixed privilege validation bypass during plugin (bsc#1265907). - CVE-2026-34040: Fixed Authz zero length regression (bsc#1265929).
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2578-1 4 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues - CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages that cause files to be written outside of the BuildKit state directory (bsc#1260967). - CVE-2026-33748: github.com/…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2575-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2571-1 5 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 23, 2026 -
Critical max 9.6openSUSE-SU-2026:11075-1 8 CVEs
docker-stable-24.0.9_ce-18.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-18.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2580-1 29 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation …
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2567-1 5 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.103 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2559-1 5 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanou…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2553-1 2 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues The following security issues were fixed: - CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). - CVE-2026-46323: net: gro: don't merge zcopy skbs (bs…
first Jun 23, 2026 -
High max 8.8SUSE-SU-2026:2531-1 7 CVEs
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…
first Jun 23, 2026 -
High max 7.8SUSE-SU-2026:2527-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2523-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2520-1 5 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2511-1 5 CVEs
Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2503-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout …
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2496-1 5 CVEs
Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.184 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2487-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues - CVE-2026-26961: rack: mismatch in header handling can allow to smuggle multipart content (bsc#1261398). - CVE-2026-26962: rack: improper unfolding of folded multipart headers can lead to header injection…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2515-1 2 CVEs
Security update for openssh, openssh-askpass-gnome
This update for openssh, openssh-askpass-gnome fixes the following issues - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430).
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2500-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2494-1 4 CVEs
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 22, 2026 -
Critical max 9.1SUSE-SU-2026:2493-1 12 CVEs
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: - Security: re-vendor Go dependencies to address CVEs tracked against containerized-data-importer (backport of upstream PR #4110, post-v1.65.0). Fixed by this update: * google.golang.org/…
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:2492-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2490-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2488-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issue - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).
first Jun 22, 2026 -
High max 8.2SUSE-SU-2026:2486-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 22, 2026 -
Medium max 4.7SUSE-SU-2026:2485-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
first Jun 22, 2026 -
High max 7.5SUSE-SU-2026:2484-1 1 CVE
Security update for terraform-provider-local, terraform-provider-null
This update for terraform-provider-local, terraform-provider-null fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265658).
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2482-1 103 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68324: scsi: imm: …
first Jun 22, 2026 -
Critical max 9.8SUSE-SU-2026:2549-1 4 CVEs
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 23, 2026 -
Critical max 9.8SUSE-SU-2026:2532-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: …
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2530-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2529-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 7.8SUSE-SU-2026:2528-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 23, 2026 -
High max 7.4SUSE-SU-2026:2524-1 2 CVEs
Security update for libinput
This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
first Jun 23, 2026 -
High max 8.6SUSE-SU-2026:2481-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 7.3SUSE-SU-2026:2478-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue: - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 8.8SUSE-SU-2026:22212-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 20, 2026