35,648 results · Feed
-
High max 8.2SUSE-SU-2026:20907-1 2 CVEs
Security update for protobuf
This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…
first Mar 18, 2026 -
High max 8.8SUSE-SU-2026:20906-1 4 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - Update to version 17.9. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 18, 2026 -
Medium max 5.9SUSE-SU-2026:20904-1 9 CVEs
Security update for cosign
This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates (bsc#1258542) - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize r…
first Mar 18, 2026 -
High max 8.7SUSE-SU-2026:20903-1 2 CVEs
Security update for libjxl
This update for libjxl fixes the following issues: Update to libjxl 0.11.2: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory (bsc#1258090). - CVE-2026-1837: a specially crafted file can ca…
first Mar 18, 2026 -
High max 8.9SUSE-SU-2026:20949-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: g…
first Mar 27, 2026 -
Medium max 6.6SUSE-SU-2026:20948-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:20947-1 8 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:20946-1 9 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-402…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:20945-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:20944-1 7 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20943-1 2 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb…
first Mar 25, 2026 -
UnscoredSUSE-SU-2026:20942-1 0 CVEs
Security update for the initial kernel livepatch
This update contains initial livepatches for the SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel update.
first Mar 24, 2026 -
Medium max 6.6SUSE-SU-2026:20940-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59). - Avoid unsafe memcpy in ifconfig (bsc#124…
first Mar 26, 2026 -
High max 7.2SUSE-SU-2026:20941-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …
first Mar 19, 2026 -
High max 8.4SUSE-SU-2026:20936-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write (bsc#1259177).
first Mar 26, 2026 -
Medium max 5.9SUSE-SU-2026:20935-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: Fixed denial of service (bsc#1251194)
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:20934-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issue: Update to PyJWT 2.12.1: - CVE-2026-32597: PyJWT accepts unknown `crit` header extensions (bsc#1259616). Changelog: Update to 2.12.1: - Add missing typing_extensions dependency for Python < 3.11 in #1150 …
first Mar 25, 2026 -
Medium max 5.5SUSE-SU-2026:20933-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Mar 25, 2026 -
Medium max 5.3SUSE-SU-2026:20932-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - Updated to version 7.1.2: * avcodec/librsvgdec: fix compilation with librsvg 2.50.3 * libavfilter/af_firequalizer: Add check for av_malloc_array() * avcodec/libsvtav1: unbreak build with latest svtav1 * a…
first Mar 25, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…
first Mar 25, 2026 -
High max 7.2SUSE-SU-2026:20930-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Mar 25, 2026 -
High max 8.7SUSE-SU-2026:20928-1 2 CVEs
Security update for python-black
This update for python-black fixes the following issues: - CVE-2026-31900: a malicious pyproject.toml edit can lead to arbitrary code execution (bsc#1259546). - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).
first Mar 24, 2026 -
High max 7.2SUSE-SU-2026:20927-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue: Update to 389-ds 3.0.6~git249.6688af9b2: - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE (bsc#1258727). Changelog: * Issue 7277 - …
first Mar 24, 2026 -
High max 7.6SUSE-SU-2026:20926-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.18: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:20925-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 24, 2026 -
Medium max 5.5SUSE-SU-2026:20923-1 9 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870). - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntries…
first Mar 23, 2026 -
Medium max 5.3SUSE-SU-2026:20922-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
High max 8.8SUSE-SU-2026:20921-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - Update to version 18.3. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…
first Mar 20, 2026 -
High max 7.5SUSE-SU-2026:20920-1 1 CVE
Security update for python-orjson
This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump (bsc#1257121).
first Mar 20, 2026 -
High max 8.7SUSE-SU-2026:20919-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 20, 2026 -
High max 7.5SUSE-SU-2026:20918-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 20, 2026 -
High max 8.1SUSE-SU-2026:20917-1 18 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…
first Mar 20, 2026 -
Medium max 5.4SUSE-SU-2026:20916-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
High max 7.8SUSE-SU-2026:20915-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20929-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 25, 2026 -
High max 8.2SUSE-SU-2026:20902-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…
first Mar 18, 2026 -
Critical max 9.8SUSE-SU-2026:20901-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).
first Mar 18, 2026 -
High max 7.0openSUSE-SU-2026:10481-1 4 CVEs
python314-3.14.3-4.1 on GA media
These are all security issues fixed in the python314-3.14.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10480-1 4 CVEs
python313-3.13.12-3.1 on GA media
These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026 -
High max 7.0openSUSE-SU-2026:10478-1 4 CVEs
python311-3.11.15-4.1 on GA media
These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2026