35,648 results · Feed
-
Critical max 9.8SUSE-SU-2026:1096-1 8 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…
first Mar 27, 2026 -
Medium max 6.0SUSE-SU-2026:1090-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181).
first Mar 26, 2026 -
UnscoredSUSE-SU-2026:1098-1 0 CVEs
Security update for cosign
This update for cosign rebuilds it against the current go 1.25 security release.
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1093-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480) - CVE-2026-23555: xen: Xenstored DoS by unprivileged domain (bsc#1259248, XSA-481)
first Mar 26, 2026 -
High max 8.7SUSE-SU-2026:1094-1 1 CVE
Security update for python-deepdiff
This update for python-deepdiff fixes the following issues: - CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range (bsc#1260064).
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1091-1 3 CVEs
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.3 (bsc#1243240): - CVE-2025-32801: Fixed loading a malicious hook library can lead to local privilege escalation. - CVE-2025-32802: Fixed insecure handling of file paths allows multiple loc…
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1100-1 6 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix …
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1088-1 9 CVEs
Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1089-1 8 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:20825-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fix HTTP header paramet…
first Mar 24, 2026 -
Medium max 6.7SUSE-SU-2026:20826-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 24, 2026 -
Medium max 6.7SUSE-SU-2026:1040-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 25, 2026 -
High max 8.8openSUSE-SU-2026:10439-1 1 CVE
plexus-utils-4.0.2-2.1 on GA media
These are all security issues fixed in the plexus-utils-4.0.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.7openSUSE-SU-2026:10435-1 6 CVEs
cpp-httplib-devel-0.38.0-1.1 on GA media
These are all security issues fixed in the cpp-httplib-devel-0.38.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.2openSUSE-SU-2026:10440-1 1 CVE
jupyter-nbclassic-1.3.3-1.1 on GA media
These are all security issues fixed in the jupyter-nbclassic-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
Critical max 9.6openSUSE-SU-2026:10438-1 2 CVEs
openbao-2.5.2-1.1 on GA media
These are all security issues fixed in the openbao-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi: mpi3mr: Synchronou…
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1077-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2: …
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10437-1 1 CVE
libnghttp2-14-1.68.1-1.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.68.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences (bsc#1250887). - CVE-2023-53794: cifs: fix session state check in …
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1075-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10441-1 1 CVE
strongswan-6.0.5-1.1 on GA media
These are all security issues fixed in the strongswan-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1073-1 9 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-3848…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1076-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1074-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 26, 2026 -
High max 7.5openSUSE-SU-2026:10436-1 1 CVE
freeipmi-1.6.17-1.1 on GA media
These are all security issues fixed in the freeipmi-1.6.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.8openSUSE-SU-2026:10434-1 8 CVEs
chromedriver-146.0.7680.164-1.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.164-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2026 -
High max 8.9SUSE-SU-2026:1067-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867).
first Mar 26, 2026 -
High max 8.7SUSE-SU-2026:1064-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 26, 2026 -
Medium max 6.6SUSE-SU-2026:1066-1 3 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-49761: ReDoS vulnerability in REXML gem (bsc#1232440 bsc#1232441). - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016). - CVE-2026-27820: insuff…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1065-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 26, 2026 -
Medium max 6.7SUSE-SU-2026:1061-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 26, 2026 -
High max 7.8SUSE-SU-2026:1060-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes one security issue The following security issue was fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118).
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1059-1 7 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2025-21738: …
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1063-1 9 CVEs
Security update for frr
This update for frr fixes the following issues: Security issues: - CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838). - CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829). - CVE-2025-61101: NULL Pointer Dereference in FRRout…
first Mar 26, 2026 -
Critical max 10.0
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-48989: HTTP/2 protocol (including DNS over HTTPS) is vulnerable to 'MadeYouReset' DoS attack (bsc#1243895). - CVE-2025-52434: race condition on connection close when using…
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1057-1 9 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838). - CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829). - CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833)…
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1049-1 11 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.100 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …
first Mar 26, 2026 -
High max 7.5SUSE-SU-2026:1056-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS (bsc#1259845).
first Mar 26, 2026 -
Critical max 9.8SUSE-SU-2026:1048-1 9 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 26, 2026