35,648 results · Feed
-
Critical max 9.1openSUSE-SU-2026:10601-1 12 CVEs
grafana-11.6.14+security01-1.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security01-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
High max 7.5SUSE-SU-2026:1550-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
first Apr 22, 2026 -
High max 7.5SUSE-SU-2026:1548-1 1 CVE
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.5. Security issues fixed: - CVE-2026-3608: stack overflow error via specially crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons(bsc#1260380). Other updat…
first Apr 22, 2026 -
Medium max 6.1openSUSE-SU-2026:10599-1 1 CVE
cacti-1.2.30+git306.82d5aef5-1.1 on GA media
These are all security issues fixed in the cacti-1.2.30+git306.82d5aef5-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
High max 8.5openSUSE-SU-2026:10603-1 3 CVEs
jupyter-nbconvert-7.17.1-1.1 on GA media
These are all security issues fixed in the jupyter-nbconvert-7.17.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2026 -
High max 7.8SUSE-SU-2026:1537-1 2 CVEs
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivileged …
first Apr 21, 2026 -
Critical max 9.3SUSE-SU-2026:1541-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-34078: improper processing of app-controlled symlinks by sandbox-expose can lead to sandbox escape, host file access and code execution in the host context (bsc#1261769). - CVE-2026-34079: imprope…
first Apr 22, 2026 -
Low max 3.7openSUSE-SU-2026:20586-1 1 CVE
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Changes in roundcubemail: - update to 1.6.15 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some regressions introduced in the previous release as well a…
first Apr 17, 2026 -
Critical max 9.1openSUSE-SU-2026:20584-1 1 CVE
Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.47.0 * Add sticky choice option for leastping * Add support for enrollment links in tlsmirror * Add Wireguard Outbound (unreleased) * Add sticky choice option …
first Apr 16, 2026 -
Critical max 9.8openSUSE-SU-2026:20571-1 10 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: - Update to version go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…
first Apr 20, 2026 -
Critical max 9.8openSUSE-SU-2026:20570-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: - Update to version go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…
first Apr 20, 2026 -
Medium max 6.5openSUSE-SU-2026:20576-1 1 CVE
Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens (bsc#1261355)
first Apr 13, 2026 -
High max 7.4openSUSE-SU-2026:20567-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCM_INFO requests sent from the guest (bsc#1259079). - CVE-2026-3195: heap out-of-bou…
first Apr 20, 2026 -
Critical max 9.1openSUSE-SU-2026:20555-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 17, 2026 -
High max 7.7openSUSE-SU-2026:20554-1 10 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894). - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended fi…
first Apr 16, 2026 -
High max 8.7openSUSE-SU-2026:20569-1 1 CVE
Security update for rust1.94
This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher (bsc#1261876) Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwr…
first Apr 20, 2026 -
High max 7.5openSUSE-SU-2026:20558-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
Medium max 6.9openSUSE-SU-2026:20552-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 16, 2026 -
Medium max 4.7openSUSE-SU-2026:20533-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
High max 7.8openSUSE-SU-2026:20560-1 5 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerF…
first Apr 17, 2026 -
High max 8.8openSUSE-SU-2026:20535-1 1 CVE
Security update for plexus-utils
This update for plexus-utils fixes the following issue: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588).
first Apr 14, 2026 -
Critical max 9.8openSUSE-SU-2026:20523-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
first Apr 13, 2026 -
High max 7.5openSUSE-SU-2026:20519-1 9 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted reques…
first Apr 13, 2026 -
Medium max 6.9openSUSE-SU-2026:20512-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
High max 7.5openSUSE-SU-2026:20556-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).
first Apr 17, 2026 -
High max 8.2openSUSE-SU-2026:20505-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
first Apr 10, 2026 -
High max 7.5openSUSE-SU-2026:20501-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…
first Apr 10, 2026 -
Medium max 6.1openSUSE-SU-2026:20497-1 1 CVE
Security update for python-gi-docgen
This update for python-gi-docgen fixes the following issues: - CVE-2025-11687: Fixed reflected DOM XSS (bsc#1251961)
first Apr 9, 2026 -
High max 7.8openSUSE-SU-2026:20544-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…
first Apr 15, 2026 -
Critical max 9.2openSUSE-SU-2026:20540-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…
first Apr 13, 2026 -
High max 7.0openSUSE-SU-2026:20517-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
Critical max 9.2openSUSE-SU-2026:20504-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…
first Apr 10, 2026 -
High max 8.1openSUSE-SU-2026:20525-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 8.8openSUSE-SU-2026:20487-1 2 CVEs
Security update for zlib
This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…
first Apr 9, 2026 -
Critical max 9.8openSUSE-SU-2026:20486-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.9.1 ESR (bsc#1261663). - MFSA 2026-27: * CVE-2026-5731: memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, F…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:21221-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 13, 2026 -
High max 7.5openSUSE-SU-2026:20579-1 1 CVE
Security update for gosec
This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.25.0: * chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617) * fix: allow barry action to access secrets on fork PRs (#1616) * fix: reduce G117 false p…
first Apr 14, 2026 -
High max 7.8SUSE-SU-2026:21220-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21219-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 13, 2026