35,648 results · Feed
-
Critical max 9.8openSUSE-SU-2026:10613-1 5 CVEs
kyverno-1.17.2-1.1 on GA media
These are all security issues fixed in the kyverno-1.17.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
Medium max 5.5openSUSE-SU-2026:10611-1 8 CVEs
freerdp2-2.11.7-8.1 on GA media
These are all security issues fixed in the freerdp2-2.11.7-8.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
High max 7.5openSUSE-SU-2026:10615-1 2 CVEs
ovmf-202602-9.1 on GA media
These are all security issues fixed in the ovmf-202602-9.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
High max 8.4openSUSE-SU-2026:10614-1 1 CVE
libntfs-3g-devel-2022.10.3-6.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2022.10.3-6.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
Critical max 9.1openSUSE-SU-2026:10612-1 1 CVE
golang-github-prometheus-alertmanager-0.31.1-3.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.31.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
High max 7.7openSUSE-SU-2026:10616-1 1 CVE
python311-Mako-1.3.11-1.1 on GA media
These are all security issues fixed in the python311-Mako-1.3.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2026 -
Medium max 4.0openSUSE-SU-2026:20618-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: Security issue: - CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization (bsc#1262103). - bug in SLZ compression (bsc#1261626).
first Apr 23, 2026 -
High max 8.7openSUSE-SU-2026:20617-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks (bsc#1262184).
first Apr 22, 2026 -
High max 7.8SUSE-SU-2026:21281-1 1 CVE
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 23, 2026 -
Medium max 4.0SUSE-SU-2026:21280-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: Security issue: - CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization (bsc#1262103). - bug in SLZ compression (bsc#1261626).
first Apr 23, 2026 -
High max 8.0SUSE-SU-2026:21279-1 2 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…
first Apr 23, 2026 -
High max 8.0SUSE-SU-2026:21278-1 2 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…
first Apr 22, 2026 -
High max 7.8SUSE-SU-2026:21277-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 22, 2026 -
Medium max 6.8SUSE-SU-2026:21275-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922).
first Apr 22, 2026 -
High max 7.4SUSE-SU-2026:21273-1 1 CVE
Security update for sudo
This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).
first Apr 22, 2026 -
High max 7.8SUSE-SU-2026:21271-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 22, 2026 -
High max 7.8SUSE-SU-2026:21267-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 21, 2026 -
High max 7.8SUSE-SU-2026:21266-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 21, 2026 -
High max 7.8SUSE-SU-2026:21282-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
first Apr 23, 2026 -
Medium max 6.7SUSE-SU-2026:21274-1 1 CVE
Security update for libcap
This update for libcap fixes the following issues: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in `cap_set_file()` (bsc#1261809).
first Apr 22, 2026 -
Critical max 9.1SUSE-SU-2026:21272-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).
first Apr 22, 2026 -
High max 8.0SUSE-SU-2026:21269-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…
first Apr 21, 2026 -
High max 8.0SUSE-SU-2026:21270-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…
first Apr 21, 2026 -
High max 8.0SUSE-SU-2026:21268-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…
first Apr 21, 2026 -
Medium max 6.5SUSE-SU-2026:1618-1 7 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to version 1.9.12. - https://www.dnsdist.org/changelog.html#change-1.9.12 Security issues fixed: - CVE-2026-0396: crafted DNS queries triggering domain-based dynamic rules can lead to HTML injection i…
first Apr 24, 2026 -
Medium max 6.1SUSE-SU-2026:1617-1 2 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (bsc#1261569). - CVE-2026-34990: Local print admin token disclosure using temporary printer…
first Apr 24, 2026 -
Critical max 9.8openSUSE-SU-2026:10610-1 25 CVEs
MozillaThunderbird-140.9.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 24, 2026 -
High max 8.0SUSE-SU-2026:1613-1 2 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …
first Apr 24, 2026 -
Critical max 9.2SUSE-SU-2026:1607-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…
first Apr 24, 2026 -
Critical max 9.1openSUSE-SU-2026:20619-1 7 CVEs
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.2: * plugin/reload: Allow disabling jitter with 0s * bump deps * plugin/forward: fix parsing error when handling TLS+IPv6 address * plugin/loop: use crypto/rand f…
first Apr 23, 2026 -
High max 7.8SUSE-SU-2026:1611-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…
first Apr 24, 2026 -
High max 8.8SUSE-SU-2026:1606-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#125…
first Apr 24, 2026 -
Critical max 9.1
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…
first Apr 24, 2026 -
High max 7.5SUSE-SU-2026:1605-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue: Security issues fixed: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). Other updates and bugfixes: - Enable …
first Apr 24, 2026 -
Medium max 5.3SUSE-SU-2026:1608-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Apr 24, 2026 -
Medium max 5.1SUSE-SU-2026:1602-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-34757: information disclosure and data corruption due to use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST` (bsc#1261957).
first Apr 24, 2026 -
Critical max 9.1
Security update for tomcat10
This update for tomcat10 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…
first Apr 24, 2026 -
High max 7.8SUSE-SU-2026:1592-1 2 CVEs
Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…
first Apr 24, 2026 -
Medium max 5.1SUSE-SU-2026:1601-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-34757: information disclosure and data corruption due to use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST` (bsc#1261957).
first Apr 24, 2026 -
Critical max 9.3SUSE-SU-2026:1600-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769). - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770…
first Apr 24, 2026