35,648 results · Feed
-
High max 7.5SUSE-SU-2026:1230-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 9, 2026 -
High max 7.8openSUSE-SU-2026:10519-1 2 CVEs
glances-common-4.5.3-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
Medium max 6.5openSUSE-SU-2026:10518-1 1 CVE
python311-Flask-HTTPAuth-4.8.1-1.1 on GA media
These are all security issues fixed in the python311-Flask-HTTPAuth-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
None max 0.0openSUSE-SU-2026:10520-1 1 CVE
python310-3.10.20-4.1 on GA media
These are all security issues fixed in the python310-3.10.20-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
Critical max 9.2SUSE-SU-2026:1232-1 2 CVEs
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS when glob…
first Apr 9, 2026 -
Critical max 9.8openSUSE-SU-2026:10516-1 5 CVEs
python311-Django4-4.2.30-1.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.30-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2026 -
High max 7.5SUSE-SU-2026:1229-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:1225-1 8 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 9, 2026 -
Medium max 4.7SUSE-RU-2026:1228-1 2 CVEs
Recommended update for shadow
This update for shadow fixes the following issues: shadow is updated to 4.17.2 to bring lots of features and bug fixes. - util-linux-2.41 introduced new variable: LOGIN_ENV_SAFELIST. Recognize it and update dependencies. - Set SYS_{UID,GID}_MIN to 201: After …
first Apr 9, 2026 -
High max 7.8SUSE-SU-2026:1231-1 1 CVE
Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes one security issue The following security issue was fixed: - CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
first Apr 9, 2026 -
Critical max 9.8SUSE-SU-2026:1221-1 7 CVEs
Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…
first Apr 8, 2026 -
High max 8.8SUSE-SU-2026:1239-1 8 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…
first Apr 9, 2026 -
High max 8.8SUSE-SU-2026:1222-1 6 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:20461-1 2 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to dnsdist 1.9.11: - CVE-2025-8671: add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852). - CVE-2025-30187: denial of service via crafted DoH exchange (bsc#1250054).
first Apr 2, 2026 -
High max 8.7SUSE-SU-2026:20973-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
Medium max 5.5SUSE-SU-2026:20969-1 1 CVE
Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
first Apr 7, 2026 -
Medium max 5.3SUSE-SU-2026:20968-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
High max 8.7SUSE-SU-2026:20967-1 1 CVE
Security update for cockpit-repos
This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
first Apr 5, 2026 -
Medium max 4.0SUSE-SU-2026:20963-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 30, 2026 -
Medium max 5.3SUSE-SU-2026:20962-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the func…
first Mar 30, 2026 -
Medium max 5.4SUSE-SU-2026:1051-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229). - CVE-20…
first Apr 8, 2026 -
High max 7.4openSUSE-SU-2026:10510-1 1 CVE
sudo-1.9.17p2-2.1 on GA media
These are all security issues fixed in the sudo-1.9.17p2-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
Medium max 5.9openSUSE-SU-2026:10509-1 2 CVEs
steampipe-2.4.1-1.1 on GA media
These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10508-1 9 CVEs
ruby4.0-rubygem-rack-2.2-2.2.23-1.1 on GA media
These are all security issues fixed in the ruby4.0-rubygem-rack-2.2-2.2.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.9openSUSE-SU-2026:10507-1 1 CVE
python311-lupa-2.7-1.1 on GA media
These are all security issues fixed in the python311-lupa-2.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10504-1 7 CVEs
corepack24-24.14.1-1.1 on GA media
These are all security issues fixed in the corepack24-24.14.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1214-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.5openSUSE-SU-2026:10506-1 1 CVE
jupyter-jupyterlab-templates-0.5.3-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.8SUSE-SU-2026:1212-1 6 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…
first Apr 8, 2026 -
Critical max 9.8openSUSE-SU-2026:10503-1 3 CVEs
firefox-esr-140.9.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1213-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.5SUSE-SU-2026:1209-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).
first Apr 8, 2026 -
High max 8.7openSUSE-SU-2026:10505-1 8 CVEs
libIex-3_4-33-3.4.9-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 7.3openSUSE-SU-2026:10502-1 1 CVE
dcmtk-3.7.0-2.1 on GA media
These are all security issues fixed in the dcmtk-3.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
High max 8.1SUSE-SU-2026:1215-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…
first Apr 8, 2026 -
High max 7.2openSUSE-SU-2026:10500-1 1 CVE
389-ds-3.1.4+e2562f589-1.1 on GA media
These are all security issues fixed in the 389-ds-3.1.4+e2562f589-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
Critical max 9.1SUSE-SU-2026:1208-1 1 CVE
Security update for ignition
This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)
first Apr 8, 2026 -
Critical max 9.8openSUSE-SU-2026:10501-1 3 CVEs
MozillaThunderbird-140.9.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2026 -
Medium max 4.4SUSE-SU-2026:1218-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589).
first Apr 8, 2026 -
High max 8.7SUSE-SU-2026:1217-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issue: - CVE-2026-24684: Heap-use-after-free in play_thread (bsc#1257991).
first Apr 8, 2026