35,648 results · Feed
-
High max 7.5openSUSE-SU-2026:20908-1 1 CVE
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
first Jun 5, 2026 -
High max 7.6openSUSE-SU-2026:20907-1 5 CVEs
Security update for erlang
This update for erlang fixes the following issues - CVE-2025-4748: improper limitation of a pathname may lead to path traversal (bsc#1244642). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc…
first Jun 5, 2026 -
Critical max 9.0openSUSE-SU-2026:20905-1 6 CVEs
Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
High max 7.8SUSE-SU-2026:22037-1 3 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). - CVE-2026-31406: xfrm: Fix w…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23437: net: shaper: protect late read …
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22026-1 4 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-o…
first Jun 3, 2026 -
UnscoredSUSE-SU-2026:22025-1 0 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issue - CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency (bsc#1262803).
first Jun 3, 2026 -
High max 7.7SUSE-SU-2026:22016-1 4 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2026-25833: mbedtls: buffer overflow in the `x509_inet_pton_ipv6()` function (bsc#1261476). - CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client …
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22015-1 8 CVEs
Security update for rsync
This update for rsync fixes the following issues - CVE-2025-10158: Out of bounds array access via negative index (bsc#1254441). - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (use chroot = no) (bsc#1264511). - CVE-2026-41035: count of entries mismatch can le…
first Jun 2, 2026 -
High max 8.2SUSE-SU-2026:22011-1 1 CVE
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 2, 2026 -
High max 8.7SUSE-SU-2026:22005-1 2 CVEs
Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2026-31812: quinn-proto: denial of service via crafted QUIC initial packet (bsc#1259624). - CVE-2026-32766: astral-tokio-tar: malformed PAX extensions can lead to archive misinterpretation (bsc#12599…
first Jun 1, 2026 -
High max 8.2SUSE-SU-2026:22003-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
first Jun 1, 2026 -
Medium max 5.9SUSE-SU-2026:22002-1 1 CVE
Security update for tree-sitter
This update for tree-sitter fixes the following issue - CVE-2026-44216: wasmtime: allocation of a table exceeding the size of the host's address space leads to panic (bsc#1265300).
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22001-1 2 CVEs
Security update for helm
This update for helm fixes the following issues Security issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-41888: github.com/distribution/distribution/v3: tag d…
first May 30, 2026 -
High max 7.5SUSE-SU-2026:22000-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issue - CVE-2026-42198: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (bsc#1264174).
first May 29, 2026 -
Medium max 5.3SUSE-SU-2026:21996-1 2 CVEs
Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec
This update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec fixes the following issues: Changes in apache-commons-lang3: Update to 3.20.0 * New features: + Add SystemPro…
first May 29, 2026 -
High max 7.5openSUSE-SU-2026:20909-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Jun 5, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23437: net: shaper: protect late read …
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 2, 2026 -
High max 7.8SUSE-SU-2026:22036-1 2 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). - CVE-2026-31406: xfrm: Fix w…
first Jun 2, 2026 -
Low max 3.3openSUSE-SU-2026:20911-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)
first Jun 5, 2026 -
Low max 2.9openSUSE-SU-2026:20910-1 1 CVE
Security update for uriparser
This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption (bsc#1255000).
first Jun 5, 2026 -
Medium max 5.0SUSE-SU-2026:22041-1 1 CVE
Security update for csync2
This update for csync2 fixes the following issues Security issue: - CVE-2026-41051: uses insecure temporary directories when compiled with C99 or later (bsc#1262472). Non security issue: - Fix packages for Immutable Mode (jsc#PED-14855).
first Jun 3, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 2, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-46300: FragNesia attack: another xfrm/…
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data_…
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:22024-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via recursive <use> element amplification (bsc#1259690).
first Jun 2, 2026 -
Low max 2.3SUSE-SU-2026:22023-1 1 CVE
Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the `Vary: Cookie` header (bsc#1258700).
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22022-1 2 CVEs
Security update for memcached
This update for memcached fixes the following issues - CVE-2026-47783: timing side-channel in SASL password database authentication (username) (bsc#1265873). - CVE-2026-47784: timing side-channel in SASL password database authentication (password) (bsc#126588…
first Jun 2, 2026 -
High max 8.1SUSE-SU-2026:22020-1 1 CVE
Security update for busybox
This update for busybox fixes the following issue - CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client (bsc#1263989).
first Jun 2, 2026 -
Medium max 5.3SUSE-SU-2026:22018-1 3 CVEs
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2026-3219: concatenated tar and ZIP files are handled as ZIP files, resulting in possibly obfuscated malicious code (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly ins…
first Jun 2, 2026 -
High max 7.5SUSE-SU-2026:22004-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issue - CVE-2026-42304: Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression (bsc#1265265).
first Jun 1, 2026 -
High max 7.5SUSE-SU-2026:21999-1 2 CVEs
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-40347: crafted `multipart/form-data` can cause a denial of service (bsc#1262403). - CVE-2026-42561: denial of service vulnerability in multipart part header parsing (bsc#1265250).
first May 29, 2026 -
Medium max 6.6SUSE-SU-2026:21995-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issue - CVE-2025-54874: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of- bounds heap memory write (bsc#1247650).
first May 29, 2026 -
Medium max 5.0SUSE-SU-2026:21994-1 1 CVE
Security update for csync2
This update for csync2 fixes the following issues Security issue: - CVE-2026-41051: uses insecure temporary directories when compiled with C99 or later (bsc#1262472). Non security issue: - Fix packages for Immutable Mode (jsc#PED-14855).
first Jun 3, 2026 -
Medium max 5.3SUSE-SU-2026:21998-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-4271: use-after-free in the HTTP/2 server when user signal handlers disconnect connections during callback execution (bsc#1259767).
first May 29, 2026