35,648 results · Feed
-
Low max 3.1openSUSE-SU-2026:10989-1 5 CVEs
python311-Django4-4.2.30-3.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.30-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.5openSUSE-SU-2026:10988-1 1 CVE
perl-Protocol-HTTP2-1.130.0-1.1 on GA media
These are all security issues fixed in the perl-Protocol-HTTP2-1.130.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
Critical max 9.8openSUSE-SU-2026:10986-1 2 CVEs
perl-DBI-1.648.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.648.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.3openSUSE-SU-2026:10985-1 2 CVEs
libIex-3_4-33-3.4.12-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.4openSUSE-SU-2026:10984-1 2 CVEs
libzypp-17.38.13-1.1 on GA media
These are all security issues fixed in the libzypp-17.38.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.5openSUSE-SU-2026:10983-1 2 CVEs
gdk-pixbuf-loader-libheif-1.23.0-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.3openSUSE-SU-2026:10982-1 1 CVE
graphite2-1.3.15-1.1 on GA media
These are all security issues fixed in the graphite2-1.3.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
Critical max 9.6openSUSE-SU-2026:10981-1 1 CVE
grafana-11.6.14+security04-2.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.1openSUSE-SU-2026:10979-1 2 CVEs
agama-web-ui-21+360.16caae772-44.1 on GA media
These are all security issues fixed in the agama-web-ui-21+360.16caae772-44.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.3openSUSE-SU-2026:10978-1 3 CVEs
SDL3_sound-devel-3.2.0-1.1 on GA media
These are all security issues fixed in the SDL3_sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 7.5openSUSE-SU-2026:10977-1 2 CVEs
MozillaFirefox-151.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2322-1 2 CVEs
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
Low max 3.1SUSE-SU-2026:2318-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues - CVE-2026-6873: signed cookie salt namespace collision in `django.http.HttpRequest.get_signed_cookie` (bsc#1267578). - CVE-2026-7666: potential unencrypted email transmission via `STARTTLS` in the SMTP…
first Jun 9, 2026 -
Critical max 9.8SUSE-SU-2026:2317-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018). - CVE-2026-31402: nfsd: fix heap…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2316-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue - CVE-2026-9064: unbounded LDAP controls count in `get_ldapmessage_controls_ext()` can lead to amplified CPU time and heap allocation and a denial of service (bsc#1265898). Changes for 389-ds: - Update to versi…
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2315-1 2 CVEs
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
High max 7.8SUSE-SU-2026:2313-1 6 CVEs
Security update for vim
This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes (bsc#1261833). - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in th…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2312-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue - CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
first Jun 9, 2026 -
Medium max 5.5SUSE-SU-2026:22054-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Jun 8, 2026 -
Critical max 9.1SUSE-SU-2026:22053-1 1 CVE
Security update for elemental-system-agent
This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to version 0.3.16: * setup for immut…
first Jun 8, 2026 -
Critical max 9.1SUSE-SU-2026:22051-1 1 CVE
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/n…
first Jun 8, 2026 -
Critical max 9.1SUSE-SU-2026:22050-1 1 CVE
Security update for elemental-register
This update for elemental-register fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v1.9.2: * 71d1fb9c Local node labels …
first Jun 8, 2026 -
Critical max 9.8SUSE-SU-2026:22048-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…
first Jun 5, 2026 -
Low max 3.3SUSE-SU-2026:22047-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)
first Jun 5, 2026 -
High max 7.5SUSE-SU-2026:22046-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
Critical max 9.0SUSE-SU-2026:22045-1 6 CVEs
Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
Critical max 10.0SUSE-SU-2026:2330-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc…
-
High max 8.1SUSE-SU-2026:2329-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
-
High max 8.1SUSE-SU-2026:2328-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
-
High max 7.5SUSE-SU-2026:2327-1 3 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2326-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE…
first Jun 9, 2026 -
High max 8.7SUSE-SU-2026:2325-1 2 CVEs
Security update for kubernetes1.26
This update for kubernetes1.26 fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265740). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in S…
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2324-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 9, 2026 -
Medium max 6.5SUSE-SU-2026:2311-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: uncontrolled recursion in `lookup_handle_cname` can crash the `avahi-daemon` (bsc#1257235). - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` …
first Jun 9, 2026 -
Critical max 9.8SUSE-SU-2026:2310-1 22 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31473: media: mc, v4l2: seri…
first Jun 9, 2026 -
Low max 2.5SUSE-SU-2026:2309-1 1 CVE
Security update for podofo
This update for podofo fixes the following issue: - CVE-2026-44348: double-free in `compute_hash_to_sign()` in `src/podofo/private/OpenSSLInternal_Ripped.cpp` (bsc#1265320).
first Jun 9, 2026 -
High max 7.5SUSE-SU-2026:2308-1 12 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues - CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in `DefaultHttpRequest.setUri()` (bsc#1264350). - CVE-2026-42578: HTTP H…
first Jun 9, 2026 -
High max 8.1SUSE-SU-2026:2307-1 1 CVE
Security update for nginx
This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).
first Jun 9, 2026 -
High max 8.4SUSE-RU-2026:2237-1 3 CVEs
Recommended update for aazure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-translation-text, python-azure-appconfiguration, python-azure-appconfiguration-provider, python-azure-batch, python-azure-cognitiveservices-anomalydetector, python-azure-cognitiveservices-knowledge-qnamaker, python-azure-cognitiveservices-l
This update for azure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-transla…
first Jun 8, 2026