35,648 results · Feed
-
Critical max 9.1
tomcat10-10.1.54-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.54-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Critical max 9.1
tomcat-9.0.117-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.117-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.2openSUSE-SU-2026:10546-1 1 CVE
python311-rfc3161-client-1.0.6-1.1 on GA media
These are all security issues fixed in the python311-rfc3161-client-1.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.6openSUSE-SU-2026:10545-1 2 CVEs
python311-aiohttp-3.13.5-3.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.13.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.9openSUSE-SU-2026:10544-1 4 CVEs
log4j-2.20.0-2.1 on GA media
These are all security issues fixed in the log4j-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 6.2openSUSE-SU-2026:10543-1 3 CVEs
kubo-0.40.1-1.1 on GA media
These are all security issues fixed in the kubo-0.40.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Critical max 9.8openSUSE-SU-2026:10542-1 5 CVEs
goshs-2.0.0-1.1 on GA media
These are all security issues fixed in the goshs-2.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Critical max 9.3openSUSE-SU-2026:10541-1 2 CVEs
flatpak-1.16.6-1.1 on GA media
These are all security issues fixed in the flatpak-1.16.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Critical max 9.1openSUSE-SU-2026:10540-1 2 CVEs
Botan-3.11.1-1.1 on GA media
These are all security issues fixed in the Botan-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2026 -
Medium max 5.3SUSE-SU-2026:1324-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259207). Non securi…
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1323-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754).
first Apr 14, 2026 -
Critical max 9.8SUSE-SU-2026:1322-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0…
first Apr 14, 2026 -
Critical max 9.8SUSE-SU-2026:1321-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: - Update to go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination …
first Apr 14, 2026 -
Critical max 9.8SUSE-SU-2026:1320-1 10 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: - Update to go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination …
first Apr 14, 2026 -
Critical max 9.1SUSE-SU-2026:1314-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 `:path` pseudo-header (bsc#1260251).
first Apr 14, 2026 -
High max 8.7SUSE-SU-2026:1313-1 1 CVE
Security update for freerdp2
This update for freerdp2 fixes the following issues: - Fix the CVE-2026-24684 patch, as the previous version wrongly deleted a check for an error condition (bsc#1257991).
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1311-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754).
first Apr 14, 2026 -
Medium max 5.3SUSE-SU-2026:1310-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
first Apr 14, 2026 -
High max 7.4SUSE-SU-2026:1309-1 1 CVE
Security update for sudo
This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
first Apr 14, 2026 -
High max 7.4SUSE-SU-2026:1308-1 1 CVE
Security update for sudo
This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1307-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issue: - CVE-2026-25075: integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Apr 14, 2026 -
Critical max 9.8SUSE-SU-2026:1305-1 5 CVEs
Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-71120…
first Apr 13, 2026 -
Critical max 9.8SUSE-SU-2026:1304-1 7 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…
first Apr 13, 2026 -
High max 8.5SUSE-SU-2026:1303-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
High max 8.5SUSE-SU-2026:1302-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
High max 8.5SUSE-SU-2026:1301-1 1 CVE
Security update for tigervnc
This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)
first Apr 13, 2026 -
Medium max 5.3SUSE-SU-2026:1325-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259…
first Apr 14, 2026 -
High max 7.5SUSE-SU-2026:1312-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 14, 2026 -
High max 8.8SUSE-SU-2026:21088-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21087-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21086-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21085-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21083-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:21082-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21076-1 8 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21078-1 8 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:21073-1 8 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:21072-1 6 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:21070-1 3 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter: nf_ta…
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:21069-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).
first Apr 9, 2026