35,648 results · Feed
-
Critical max 9.8SUSE-SU-2026:20887-1 7 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:20886-1 8 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:20893-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:20884-1 6 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:1136-1 6 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix …
first Mar 27, 2026 -
Critical max 9.8SUSE-SU-2026:20888-1 7 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:1132-1 8 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-402…
first Mar 27, 2026 -
Critical max 9.8SUSE-SU-2026:20892-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …
first Mar 24, 2026 -
Critical max 10.0SUSE-SU-2026:1135-1 138 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260326T203309 2026-03-26T20:33:09Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4513 CVE-2026-32284 * GO-2026-4514 CVE-2026-3228…
first Mar 27, 2026 -
Medium max 4.0SUSE-SU-2026:1137-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…
first Mar 28, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi:…
first Mar 24, 2026 -
Medium max 4.6openSUSE-SU-2026:10464-1 1 CVE
python311-pypdf-6.9.2-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.9.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 30, 2026 -
High max 8.7openSUSE-SU-2026:10463-1 2 CVEs
netty-4.1.132-1.1 on GA media
These are all security issues fixed in the netty-4.1.132-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 30, 2026 -
High max 7.8SUSE-SU-2026:1146-1 5 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: mgr-push: - Version 5.2.3-0 * Disable build for SLES 16 rhnlib: - Version 5.2.4-0 * Disable build for SLES 16 spacecmd: - Version 5.2.6-0 * Update translation strings spacewalk-client-tools: - Version 5.2.4-0 * Disable …
first Mar 30, 2026 -
High max 7.5openSUSE-SU-2026:10462-1 1 CVE
heroic-games-launcher-2.20.1-4.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 30, 2026 -
High max 7.8SUSE-SU-2026:1141-1 5 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings uyuni-tools: - Version 5.2.5-0 * Remove migrate command * Remove template script from mgradm: use the one in the image * Split the TFTP server into a separate con…
first Mar 30, 2026 -
High max 7.8SUSE-SU-2026:1142-1 5 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: mgr-push: - Version 5.2.3-0 * Disable build for SLES 16 rhnlib: - Version 5.2.4-0 * Disable build for SLES 16 spacecmd: - Version 5.2.6-0 * Update translation strings spacewalk-client-tools: - Version 5.2.4-0 * Disable …
first Mar 30, 2026 -
High max 7.8SUSE-SU-2026:1149-1 5 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings venv-salt-minion: - Fix the typo causing buiding EL9 bundle without binary dependencies - Backport security patches for Salt vendored tornado: * CVE-2025-67724: m…
first Mar 30, 2026 -
High max 7.8SUSE-SU-2026:1140-1 5 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings uyuni-tools: - Version 5.2.5-0 * Remove migrate command * Remove template script from mgradm: use the one in the image * Split the TFTP server into a separate con…
first Mar 30, 2026 -
Critical max 9.8SUSE-SU-2026:1148-1 11 CVEs
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus: - CVE-2026-27606: Fix arbitrary file write via path traversal in rollup (bsc#1258893) * Bump rollup to version 4.59.0 - Drop SLE 12 support (jsc#PED-15474) - CVE-2026-25547: Fix unbo…
first Mar 30, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…
first Mar 30, 2026 -
Low max 3.3openSUSE-SU-2026:10460-1 1 CVE
gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.21.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 29, 2026 -
Critical max 9.3openSUSE-SU-2026:10459-1 12 CVEs
freerdp2-2.11.7-6.1 on GA media
These are all security issues fixed in the freerdp2-2.11.7-6.1 package on the GA media of openSUSE Tumbleweed.
first Mar 29, 2026 -
Medium max 6.1openSUSE-SU-2026:10461-1 1 CVE
python311-nltk-3.9.4-1.1 on GA media
These are all security issues fixed in the python311-nltk-3.9.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 29, 2026 -
Critical max 10.0openSUSE-SU-2026:10458-1 46 CVEs
MozillaFirefox-149.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-149.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 29, 2026 -
Medium max 5.5openSUSE-SU-2026:20421-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Mar 25, 2026 -
Medium max 5.3openSUSE-SU-2026:20420-1 1 CVE
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - Updated to version 7.1.2: * avcodec/librsvgdec: fix compilation with librsvg 2.50.3 * libavfilter/af_firequalizer: Add check for av_malloc_array() * avcodec/libsvtav1: unbreak build with latest svtav1 * a…
first Mar 25, 2026 -
High max 7.5openSUSE-SU-2026:20418-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 25, 2026 -
High max 8.7openSUSE-SU-2026:20417-1 2 CVEs
Security update for python-black
This update for python-black fixes the following issues: - CVE-2026-31900: a malicious pyproject.toml edit can lead to arbitrary code execution (bsc#1259546). - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).
first Mar 24, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…
first Mar 25, 2026 -
High max 7.2openSUSE-SU-2026:20415-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issue: Update to 389-ds 3.0.6~git249.6688af9b2: - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE (bsc#1258727). Changelog: * Issue 7277 - …
first Mar 24, 2026 -
High max 7.5openSUSE-SU-2026:20413-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 24, 2026 -
High max 7.5openSUSE-SU-2026:20429-1 1 CVE
Security update for python-dynaconf
This update for python-dynaconf fixes the following issues: Changes in python-dynaconf: - CVE-2026-33154: Server-Side Template Injection in the @Jinja resolver (bsc#1260063)
first Mar 25, 2026 -
High max 7.6openSUSE-SU-2026:20414-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.18: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …
first Mar 24, 2026 -
High max 7.5openSUSE-SU-2026:20423-1 1 CVE
Security update for freeciv
This update for freeciv fixes the following issues: Changes in freeciv: - freeciv 3.2.4: * CVE-2026-33250: Fix a vulnerability allowing remote crashing of the server (boo#1260036) * SDL2 client: Fix crash on selecting nation style or nation - includes changes…
first Mar 23, 2026 -
Medium max 5.3openSUSE-SU-2026:20409-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
High max 7.2openSUSE-SU-2026:20419-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
first Mar 25, 2026 -
High max 7.5openSUSE-SU-2026:20407-1 1 CVE
Security update for python-orjson
This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump (bsc#1257121).
first Mar 20, 2026 -
High max 8.7openSUSE-SU-2026:20406-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 20, 2026 -
High max 8.1openSUSE-SU-2026:20405-1 18 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…
first Mar 20, 2026