35,648 results · Feed
-
High max 7.8SUSE-SU-2026:22104-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues Update to 3.53.2: - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#…
first Jun 15, 2026 -
Medium max 5.0SUSE-SU-2026:22103-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to …
first Jun 15, 2026 -
Medium max 4.3SUSE-SU-2026:22102-1 1 CVE
Security update for glib-networking
This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).
first Jun 12, 2026 -
Critical max 9.1SUSE-SU-2026:22101-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-system-agent: - Update to versio…
first Jun 11, 2026 -
Critical max 9.1SUSE-SU-2026:22100-1 9 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …
first Jun 11, 2026 -
Critical max 9.8SUSE-SU-2026:22099-1 60 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…
first Jun 15, 2026 -
Medium max 6.5
python311-google-adk-2.2.0-1.1 on GA media
These are all security issues fixed in the python311-google-adk-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Critical max 9.8openSUSE-SU-2026:11043-1 1 CVE
python313-distributed-2026.6.0-1.1 on GA media
These are all security issues fixed in the python313-distributed-2026.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 8.2openSUSE-SU-2026:11042-1 1 CVE
python311-asyncssh-2.23.1-1.1 on GA media
These are all security issues fixed in the python311-asyncssh-2.23.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2419-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.7.0~git193.9ab79d496: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Cha…
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2418-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.2.10~git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Ch…
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2416-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2415-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2413-1 0 CVEs
Security update for distribution
This update for distribution rebuilds it against the current go security release.
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2417-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue Update to 2.2.10~git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Ch…
first Jun 16, 2026 -
High max 7.8openSUSE-SU-2026:11045-1 1 CVE
traefik2-2.11.50-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.50-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
Medium max 6.1openSUSE-SU-2026:11041-1 1 CVE
python-WebOb-doc-1.8.10-1.1 on GA media
These are all security issues fixed in the python-WebOb-doc-1.8.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2410-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2407-1 0 CVEs
Security update for containerized-data-importer
This update for containerized-data-importer rebuilds the current sources against latest go security release and the images against the latest released updates.
first Jun 16, 2026 -
High max 7.5SUSE-SU-2026:2406-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-1544: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554). - CVE-2025-11234: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service (bsc#1250984). - C…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2405-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2404-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2403-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds R…
first Jun 16, 2026 -
Critical max 9.8SUSE-SU-2026:22108-1 98 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68…
first Jun 15, 2026 -
Medium max 6.7SUSE-SU-2026:0741-2 1 CVE
Security update for shim
This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…
first Jun 16, 2026 -
Medium max 6.5openSUSE-SU-2026:11040-1 1 CVE
grafana-11.6.14+security04-4.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:2424-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 16, 2026 -
High max 7.8SUSE-SU-2026:2423-1 1 CVE
Security update for libcaca
This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).
first Jun 16, 2026 -
Critical max 9.8SUSE-SU-2026:2421-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->cb i…
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2420-1 0 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current go security release.
first Jun 16, 2026 -
UnscoredSUSE-SU-2026:2414-1 0 CVEs
Security update for runc
This update for runc rebuilds it against the current go security release.
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2412-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2411-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - C…
first Jun 16, 2026 -
High max 8.8SUSE-SU-2026:2409-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
first Jun 16, 2026 -
Critical max 9.1SUSE-SU-2026:2408-1 1 CVE
Security update for perl-HTTP-Daemon
This update for perl-HTTP-Daemon fixes the following issues: - CVE-2026-8450: Fixed OS command injection via send_file() (bsc#1266370).
first Jun 16, 2026 -
Critical max 9.8SUSE-SU-2026:22087-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Low max 2.9SUSE-SU-2026:22084-1 1 CVE
Security update for uriparser
This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption (bsc#1255000).
first Jun 5, 2026 -
Medium max 6.5openSUSE-SU-2026:20963-1 6 CVEs
Security update for neonmodem
This update for neonmodem fixes the following issues: Changes in neonmodem: - Update golang.org/x/net dependency to v0.55.0 due to bsc#1267193 - Update golang.org/x/image dependency to v0.38.0 due to bsc#1260727 - Update golang.org/x/term dependency to v0.42.…
first Jun 12, 2026 -
Critical max 10.0openSUSE-SU-2026:20956-1 21 CVEs
Security update for trivy
This update for trivy fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267047). - CVE-2026-33814: golang.org/x/net/http2: infinite loo…
first Jun 11, 2026 -
Medium max 5.5openSUSE-SU-2026:20953-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-4367: out-of-bounds read in `xpmNextWord()` (bsc#1260928).
first Jun 11, 2026