35,648 results · Feed
-
UnscoredSUSE-SU-2026:21120-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_18
New livepatch SLE Micro 6.0/6.1 kernel update 18.
first Apr 13, 2026 -
Critical max 9.1SUSE-SU-2026:21115-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).
first Apr 14, 2026 -
Low max 3.3SUSE-SU-2026:21113-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).
first Apr 10, 2026 -
Medium max 6.5SUSE-SU-2026:21127-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)
first Apr 14, 2026 -
Low max 1.7SUSE-SU-2026:21126-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876)
first Apr 14, 2026 -
Critical max 9.2SUSE-SU-2026:21124-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update to 9.2.0280 - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via vari…
first Apr 14, 2026 -
Medium max 6.7SUSE-SU-2026:1433-1 1 CVE
Security update for libcap
This update for libcap fixes the following issue: - CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1431-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
Low max 3.3SUSE-SU-2026:1427-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issue: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1430-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1428-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1429-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issue: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
first Apr 17, 2026 -
Medium max 5.5SUSE-SU-2026:1425-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 17, 2026 -
Low max 2.3openSUSE-SU-2026:10569-1 5 CVEs
ruby4.0-rubygem-rails-html-sanitizer-1.7.0-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rails-html-sanitizer-1.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 17, 2026 -
High max 7.3openSUSE-SU-2026:10568-1 1 CVE
opam-2.5.1-1.1 on GA media
These are all security issues fixed in the opam-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 17, 2026 -
Medium max 5.9SUSE-SU-2026:1439-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issue: Security updates: - CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). Other updates: - Update openvswitch to 3.5.4
first Apr 17, 2026 -
Medium max 5.5SUSE-SU-2026:1424-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 17, 2026 -
Medium max 5.3SUSE-SU-2026:1436-1 1 CVE
Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009).
first Apr 17, 2026 -
Critical max 9.8SUSE-SU-2026:1438-1 3 CVEs
Security update for libraw
This update for libraw fixes the following issues: - CVE-2026-20911: heap-based buffer overflow in `HuffTable::initval`(bsc#1261673). - CVE-2026-21413: heap-based buffer overflow in `lossless_jpeg_load_raw` (bsc#1261674). - CVE-2026-24660: heap-based buffer o…
first Apr 17, 2026 -
Low max 3.3SUSE-SU-2026:1419-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2025-9615: non-admin users are allowed to use certificates from other users (bsc#1257359).
first Apr 16, 2026 -
Medium max 6.5SUSE-SU-2026:1442-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 17, 2026 -
High max 7.5SUSE-SU-2026:1421-1 1 CVE
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via recursive <use> element amplification (bsc#1259690).
first Apr 17, 2026 -
UnscoredSUSE-SU-2026:1422-1 0 CVEs
Security update for smc-tools
This update for smc-tools fixes the following issue: Update to smc-tools v1.8.7: - predictable /tmp file allows for local denial of service (bsc#1230052). Changelog: Update to v1.8.7: - smc_rnics: fix regression when PFT not available - smcd/smcr: prevent DoS…
first Apr 17, 2026 -
Low max 3.3SUSE-SU-2026:1420-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2025-9615: non-admin users are allowed to use certificates from other users (bsc#1257359).
first Apr 16, 2026 -
Medium max 6.5SUSE-SU-2026:1441-1 1 CVE
Security update for avahi
This update for avahi fixes the following issue: - CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
first Apr 17, 2026 -
UnscoredSUSE-SU-2026:1423-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go 1.25 security release.
first Apr 17, 2026 -
Medium max 6.7SUSE-SU-2026:1432-1 1 CVE
Security update for libcap
This update for libcap fixes the following issue: - CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).
first Apr 17, 2026 -
Low max 3.3SUSE-SU-2026:1443-1 1 CVE
Security update for NetworkManager
This update for NetworkManager fixes the following issue: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Don't renew DHCP lease when software devices' MAC is empty (bsc#1225498).
first Apr 17, 2026 -
Medium max 5.9SUSE-SU-2026:1440-1 1 CVE
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: - CVE-2026-34956: invalid memory access via crafted FTP payloads in userspace conntrack flows specifying the FTP alg handler (bsc#1261273).
first Apr 17, 2026 -
High max 7.0SUSE-SU-2026:1417-1 5 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#1259…
first Apr 16, 2026 -
Low max 2.5SUSE-SU-2026:1418-1 1 CVE
Security update for iproute2
This update for iproute2 fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
first Apr 16, 2026 -
Critical max 9.8SUSE-SU-2026:21106-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
first Apr 13, 2026 -
Medium max 4.7SUSE-SU-2026:21112-1 1 CVE
Security update for pam
This update for pam fixes the following issue: - CVE-2024-10041: libpam: vulnerable to read hashed password (bsc#1232234).
first Apr 14, 2026 -
High max 8.7SUSE-SU-2026:21111-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 14, 2026 -
High max 8.1SUSE-SU-2026:21107-1 7 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-283…
first Apr 13, 2026 -
High max 7.0SUSE-SU-2026:21104-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.13. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-2297: inc…
first Apr 13, 2026 -
High max 7.8SUSE-SU-2026:21102-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…
first Apr 13, 2026 -
High max 7.8SUSE-SU-2026:21098-1 3 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilte…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21096-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 11, 2026 -
High max 7.5SUSE-SU-2026:21095-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during …
first Apr 10, 2026