35,648 results · Feed
-
Critical max 9.1SUSE-SU-2026:2369-1 11 CVEs
Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: 'Ghost domain name' variant (bsc#12655…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2368-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712). - CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717). - CVE-2026-35330: i…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2367-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets h…
first Jun 11, 2026 -
High max 7.5SUSE-SU-2026:2366-1 3 CVEs
Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets h…
first Jun 11, 2026 -
Medium max 4.3SUSE-SU-2026:2365-1 1 CVE
Security update for cosign
This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Changes for cosign: - update to 3.0.6: * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6…
first Jun 11, 2026 -
High max 8.1SUSE-SU-2026:2364-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
first Jun 11, 2026 -
Critical max 9.2SUSE-SU-2026:2363-1 4 CVEs
Security update for cockpit
This update for cockpit fixes the following issues - CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (bsc#1265040). - CVE-2026-25547: brace-expansion: unbounded brace range expansion ca…
first Jun 11, 2026 -
Medium max 6.8SUSE-SU-2026:2355-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2354-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2353-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2350-1 1 CVE
Security update for wicked
This update for wicked fixes the following issues: - CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).
first Jun 10, 2026 -
Critical max 9.1SUSE-SU-2026:2347-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260264).
first Jun 10, 2026 -
High max 8.8SUSE-SU-2026:2349-1 1 CVE
Security update for wicked
This update for wicked fixes the following issue - CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). Changes for wicked: - Update to version 0.6.79 - Fix to escape single-quotes in leaseinfo dump output used b…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2348-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). Changes for google-cloud-sap-agent: - Update to version 3.14 (bs…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2345-1 2 CVEs
Security update for kubernetes1.25
This update for kubernetes1.25 fixes the following issues: Security fixes: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory a…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2344-1 2 CVEs
Security update for kubernetes1.28
This update for kubernetes1.28 fixes the following issues: Security fixes: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory a…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2343-1 2 CVEs
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2342-1 2 CVEs
Security update for kubernetes
This update for kubernetes fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265748). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY …
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2340-1 2 CVEs
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 8.7SUSE-SU-2026:2339-1 2 CVEs
Security update for kubernetes1.27
This update for kubernetes1.27 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2337-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2335-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
High max 7.5SUSE-SU-2026:2334-1 2 CVEs
Security update for libyang
This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…
first Jun 10, 2026 -
Critical max 9.8SUSE-SU-2026:2333-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206). - CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 …
first Jun 10, 2026 -
Critical max 9.8SUSE-SU-2026:2332-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->c…
first Jun 10, 2026 -
Critical max 9.8SUSE-SU-2026:2331-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31629: nfc: llcp: add mis…
first Jun 10, 2026 -
Medium max 4.3openSUSE-SU-2026:20923-1 2 CVEs
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: - CVE-2026-33929: path traversal in the `ExtractEmbeddedFiles` example code can lead to arbitrary file writes (bsc#1262046). Other updates and bugfixes:…
first Jun 8, 2026 -
High max 8.1openSUSE-SU-2026:20919-1 4 CVEs
Security update for agama-web-ui
This update for agama-web-ui fixes the following issues - CVE-2025-7339: on-headers: incorrect array handling may lead to HTTP response header manipulation (bsc#1246678). - CVE-2026-9277: shell-quote: improper escaping of newlines in object .op values by quot…
first Jun 8, 2026 -
Critical max 9.1openSUSE-SU-2026:20921-1 1 CVE
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/n…
first Jun 8, 2026 -
High max 8.7openSUSE-SU-2026:20918-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554) Other changes in salt: - Use non vendored tornado with Python 3.11 (b…
first Jun 8, 2026 -
Medium max 5.5openSUSE-SU-2026:10987-1 1 CVE
perl-Git-Repository-1.326.0-1.1 on GA media
These are all security issues fixed in the perl-Git-Repository-1.326.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
None max 0.0openSUSE-SU-2026:10980-1 1 CVE
flannel-0.28.5-1.1 on GA media
These are all security issues fixed in the flannel-0.28.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
Medium max 5.3SUSE-SU-2026:2314-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). - CVE-2026-4271: use-after-free in the HTTP/2 server when user signal handlers disconnect connections during call…
first Jun 9, 2026 -
Medium max 4.4SUSE-SU-2026:22055-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026 -
Critical max 9.8openSUSE-SU-2026:20928-1 1 CVE
Security update for syft
This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: * Added Features - Add support for ZapAddOns as jar files [#4654 #4932 @douglasclarke] - MySQL binary classifier should distinguish between MySQL Cluster (ndb) and M…
first Jun 8, 2026 -
Medium max 4.4openSUSE-SU-2026:20926-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Jun 8, 2026 -
Medium max 5.5openSUSE-SU-2026:20925-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Jun 8, 2026 -
Critical max 9.1openSUSE-SU-2026:20924-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to version 0.3.16: * setup for immut…
first Jun 8, 2026 -
Critical max 9.1openSUSE-SU-2026:20920-1 1 CVE
Security update for elemental-register
This update for elemental-register fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v1.9.2: * 71d1fb9c Local node labels …
first Jun 8, 2026 -
Medium max 6.0openSUSE-SU-2026:10990-1 1 CVE
python-M2Crypto-doc-0.48.0-1.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026