35,648 results · Feed
-
High max 7.3SUSE-SU-2026:2477-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue: - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 8.6SUSE-SU-2026:2476-1 2 CVEs
Security update for openvswitch3
This update for openvswitch3 fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 8.6SUSE-SU-2026:2475-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 22, 2026 -
High max 7.3SUSE-SU-2026:2474-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 22, 2026 -
High max 7.8SUSE-SU-2026:22234-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues Security issues: - CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278). - CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411). Non security issue…
first Jun 21, 2026 -
Critical max 9.6SUSE-SU-2026:22233-1 1 CVE
Security update for helm
This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). Changes for helm: - Update to version 3.21.1: * F…
first Jun 21, 2026 -
High max 7.3SUSE-SU-2026:22228-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
first Jun 20, 2026 -
Critical max 10.0SUSE-SU-2026:22226-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22210-1 1 CVE
Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22209-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22225-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22208-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22203-1 16 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22201-1 1 CVE
Security update for mozjs128
This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22200-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22199-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22198-1 6 CVEs
Security update for bind
This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#12655…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22197-1 7 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22196-1 7 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:22195-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …
first Jun 20, 2026 -
Critical max 9.8SUSE-SU-2026:2518-1 4 CVEs
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…
first Jun 23, 2026 -
Medium max 4.3SUSE-SU-2026:22230-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22194-1 11 CVEs
Security update for freerdp
This update for freerdp fixes the following issues Update to version 3.26.0: - CVE-2026-33982: heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc() (bsc#1261222). - CVE-2026-33985: FreeRDP: Information …
first Jun 20, 2026 -
Critical max 10.0SUSE-SU-2026:22193-1 20 CVEs
Security update for mcphost
This update for mcphost fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267109). - CVE-2026-33814: golang.org/x/net/http2: infinite l…
first Jun 20, 2026 -
Low max 3.4SUSE-SU-2026:22192-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).
first Jun 20, 2026 -
High max 7.3SUSE-SU-2026:22191-1 1 CVE
Security update for graphite2
This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).
first Jun 20, 2026 -
High max 8.8SUSE-SU-2026:22190-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22189-1 1 CVE
Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).
first Jun 20, 2026 -
High max 7.5SUSE-SU-2026:22188-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit (bsc#1267857).
first Jun 20, 2026 -
Critical max 9.1SUSE-SU-2026:22187-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via send_file() (bsc#1266370).
first Jun 20, 2026 -
Medium max 6.9openSUSE-SU-2026:11113-1 1 CVE
python311-pypdf-6.14.0-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
High max 8.1openSUSE-SU-2026:11109-1 4 CVEs
libssh2-1-1.11.1-3.1 on GA media
These are all security issues fixed in the libssh2-1-1.11.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Low max 1.3openSUSE-SU-2026:11108-1 1 CVE
grafana-12.4.4-1.1 on GA media
These are all security issues fixed in the grafana-12.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Critical max 9.6openSUSE-SU-2026:11107-1 8 CVEs
containerd-1.7.33-1.1 on GA media
These are all security issues fixed in the containerd-1.7.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
UnscoredopenSUSE-SU-2026:11106-1 1 CVE
asn1c-0.9.29-1.1 on GA media
These are all security issues fixed in the asn1c-0.9.29-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Critical max 9.8
apache-commons-validator-1.10.1-1.1 on GA media
These are all security issues fixed in the apache-commons-validator-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
Low max 3.3openSUSE-SU-2026:11104-1 1 CVE
NetworkManager-applet-openvpn-1.12.5-1.1 on GA media
These are all security issues fixed in the NetworkManager-applet-openvpn-1.12.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 23, 2026 -
UnscoredopenSUSE-SU-2026:11103-1 4 CVEs
libxar-devel-1.8.0.0.503-1.1 on GA media
These are all security issues fixed in the libxar-devel-1.8.0.0.503-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Critical max 9.4openSUSE-SU-2026:11102-1 5 CVEs
trivy-0.71.2-1.1 on GA media
These are all security issues fixed in the trivy-0.71.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026 -
Medium max 6.9openSUSE-SU-2026:11101-1 5 CVEs
python315-3.15.0~b2-1.1 on GA media
These are all security issues fixed in the python315-3.15.0~b2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 22, 2026