35,648 results · Feed
-
High max 7.8SUSE-SU-2026:21218-1 3 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilte…
first Apr 13, 2026 -
High max 7.5openSUSE-SU-2026:20496-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 (bsc#1244485): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html…
first Apr 16, 2026 -
High max 8.8SUSE-SU-2026:21217-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 11, 2026 -
High max 7.8SUSE-SU-2026:21216-1 5 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 10, 2026 -
UnscoredSUSE-SU-2026:21215-1 0 CVEs
Security update for patterns-glibc-hwcaps
This update for patterns-glibc-hwcaps fixes the following issues: The pattern is moved from PackageHub to regular SLES. It requires packages for the x86_64 v3 architecture and is automatically pulled in when this architecture is present. These packages are op…
first Apr 9, 2026 -
High max 8.2SUSE-SU-2026:21224-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:21212-1 1 CVE
Security update for freeipmi
This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).
first Apr 17, 2026 -
High max 7.8SUSE-SU-2026:21211-1 5 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerF…
first Apr 17, 2026 -
Critical max 9.1SUSE-SU-2026:21210-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …
first Apr 17, 2026 -
High max 7.7SUSE-SU-2026:21208-1 10 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894). - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended fi…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21209-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
Medium max 6.9SUSE-SU-2026:21206-1 2 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21203-1 2 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access (bsc#1257359). - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472). Changes for strongswan: - Fixed a vulne…
first Apr 16, 2026 -
Critical max 9.2openSUSE-SU-2026:20502-1 2 CVEs
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…
first Apr 10, 2026 -
Medium max 6.1openSUSE-SU-2026:20495-1 2 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in …
first Apr 9, 2026 -
Critical max 9.2SUSE-SU-2026:21197-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…
first Apr 15, 2026 -
High max 7.5SUSE-SU-2026:21195-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21194-1 1 CVE
Security update for plexus-utils
This update for plexus-utils fixes the following issue: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588).
first Apr 14, 2026 -
High max 7.5openSUSE-SU-2026:20513-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026 -
Medium max 4.7SUSE-SU-2026:21192-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
High max 8.7SUSE-SU-2026:21191-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 14, 2026 -
High max 8.1SUSE-SU-2026:21186-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 8.2openSUSE-SU-2026:20506-1 2 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature ve…
first Apr 10, 2026 -
Critical max 9.8SUSE-SU-2026:21184-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
first Apr 13, 2026 -
High max 7.5SUSE-SU-2026:21181-1 9 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted reques…
first Apr 13, 2026 -
Medium max 5.3openSUSE-SU-2026:20499-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 9, 2026 -
Medium max 6.5openSUSE-SU-2026:20480-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: use Crypt:URandom for generating nonces (bsc#1246623)
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:21204-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: - Update to release 9.20.21 - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence …
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:21178-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
High max 8.1openSUSE-SU-2026:20489-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:21200-1 3 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 (bsc#1244485): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html…
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:21173-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026 -
Critical max 9.2SUSE-SU-2026:21168-1 2 CVEs
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…
first Apr 10, 2026 -
Medium max 5.3openSUSE-SU-2026:20479-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Apr 20, 2026 -
Medium max 6.9SUSE-SU-2026:21172-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
Critical max 9.2SUSE-SU-2026:21167-1 2 CVEs
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…
first Apr 10, 2026 -
High max 7.5SUSE-SU-2026:21164-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…
first Apr 10, 2026 -
Medium max 5.9openSUSE-FU-2026:20562-1 1 CVE
Feature update for libgcrypt, libgpg-error
This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…
first Apr 17, 2026 -
Critical max 9.2SUSE-SU-2026:21166-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…
first Apr 10, 2026 -
Medium max 5.3SUSE-SU-2026:21161-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 9, 2026