35,648 results · Feed
-
UnscoredSUSE-SU-2026:2451-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2450-1 84 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: Add workaround for Cortex-A76 erratum 1286807 (bsc#1266290). - CVE-2025-40253: s390/ctcm: Fix double-kfree (b…
first Jun 18, 2026 -
Medium max 5.9first Jun 18, 2026
-
Critical max 9.8SUSE-SU-2026:2445-1 11 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues Update to version 4.4.7: - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec…
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2444-1 11 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues Update to version 4.4.7: - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec…
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:2442-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issues: - CVE-2026-8450: Fixed OS command injection via send_file() (bsc#1266370).
first Jun 18, 2026 -
Medium max 6.8SUSE-SU-2026:2441-1 1 CVE
Security update for rustup
This update for rustup fixes the following issues - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257902). - rust-shlex: Multiple issues involving quote API (RUSTSEC-2024-0006, GHSA-r7qv-8r…
first Jun 18, 2026 -
Critical max 9.8SUSE-SU-2026:2440-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-5928: libio: Fix ungetwc operating on byte stream (bsc#1262464, BZ #33998) - CVE-2026-5450: stdio-common: Fix buffer overflow in scanf %mc (bsc#1262465, BZ #34008) - CVE-2026-4046: Use pending chara…
first Jun 18, 2026 -
Critical max 9.1SUSE-SU-2026:22132-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2024-41996: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-…
first Jun 11, 2026 -
Medium max 4.3SUSE-SU-2026:22135-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 15, 2026 -
Critical max 9.1SUSE-SU-2026:22133-1 6 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Update to version 20260430.00: * Update dependencies and go version to 1.26.2 (#607) (bsc#1265762, CVE-2026-33814) * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604) (bsc#1260264, CVE…
first Jun 12, 2026 -
Critical max 9.8SUSE-SU-2026:22137-1 98 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68…
first Jun 15, 2026 -
High max 8.8SUSE-SU-2026:22143-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CV…
first Jun 11, 2026 -
Critical max 9.1SUSE-SU-2026:22141-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-system-agent: - Update to versio…
first Jun 11, 2026 -
Medium max 5.0SUSE-SU-2026:22139-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to …
first Jun 16, 2026 -
High max 7.4SUSE-SU-2026:22138-1 5 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:22134-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 12, 2026 -
Medium max 5.9openSUSE-SU-2026:11051-1 2 CVEs
weblate-5.17.1-2.1 on GA media
These are all security issues fixed in the weblate-5.17.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Critical max 9.6openSUSE-SU-2026:11050-1 2 CVEs
warewulf4-4.7.0-1.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Medium max 5.1openSUSE-SU-2026:11049-1 3 CVEs
liburiparser1-1.0.2-1.1 on GA media
These are all security issues fixed in the liburiparser1-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
High max 7.3openSUSE-SU-2026:11048-1 1 CVE
trivy-0.71.1-2.1 on GA media
These are all security issues fixed in the trivy-0.71.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
High max 7.8openSUSE-SU-2026:11047-1 3 CVEs
traefik-3.7.5-1.1 on GA media
These are all security issues fixed in the traefik-3.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
UnscoredSUSE-SU-2026:2439-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current go security release.
first Jun 17, 2026 -
Critical max 10.0openSUSE-SU-2026:11046-1 4 CVEs
google-osconfig-agent-20260615.01-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260615.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2026 -
Critical max 9.1SUSE-SU-2026:2438-1 6 CVEs
Security update for alloy
This update for alloy fixes the following issues Security issues: - CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message (bsc#1259919). - CVE-…
first Jun 17, 2026 -
High max 7.8SUSE-SU-2026:2437-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-5405: RDP dissector crash (bsc#1263767). - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
first Jun 17, 2026 -
High max 7.5SUSE-SU-2026:2430-1 4 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues - CVE-2026-3497: Information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-…
first Jun 17, 2026 -
Medium max 5.3SUSE-SU-2026:2429-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/build…
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:2428-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459).
first Jun 17, 2026 -
High max 8.8SUSE-SU-2026:2427-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459).
first Jun 17, 2026 -
UnscoredSUSE-SU-2026:2426-1 0 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB …
first Jun 17, 2026 -
Critical max 9.1SUSE-SU-2026:22128-1 6 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: Changes in google-guest-agent: Update to version 20260430.00 * Update OWNERS (#609) * Update THIRD_PARTY_LICENSES to be package specific location. (#608) * Update dependencies and go version to 1.…
first Jun 15, 2026 -
High max 8.6SUSE-SU-2026:22125-1 1 CVE
Security update for editorconfig-core-c
This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: l_pattern buffer overflow (bsc#1262131).
first Jun 15, 2026 -
Critical max 9.8SUSE-SU-2026:22127-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Low max 3.9SUSE-SU-2026:22126-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
Medium max 5.5SUSE-SU-2026:22121-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-4367: out-of-bounds read in `xpmNextWord()` (bsc#1260928).
first Jun 11, 2026 -
Low max 3.9SUSE-SU-2026:22114-1 4 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper …
first Jun 15, 2026 -
Medium max 6.6SUSE-SU-2026:22118-1 1 CVE
Security update for python-python-dotenv
This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewriting `.env` files, allowing a local attacker to overwrite arbitrary files …
first Jun 11, 2026 -
Critical max 9.8SUSE-SU-2026:22112-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
High max 8.6SUSE-SU-2026:22105-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Jun 15, 2026