35,648 results · Feed
-
High max 8.8openSUSE-SU-2026:10426-1 1 CVE
python311-intake-2.0.9-1.1 on GA media
These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1010-1 1 CVE
Security update 5.0.7 for Multi-Linux Manager Server
This update fixes the following issues: branch-network-formula: - Update to version 1.1.0 * Enable containers on SLE15SP7 * Exclude podman interfaces from sysctl setting cobbler: - Compatibility fixes for tftpboot directory setup inter-server-sync: - Version …
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1027-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:1000-1 11 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: w…
first Mar 25, 2026 -
Critical max 9.8openSUSE-SU-2026:10430-1 5 CVEs
python311-lmdb-2.1.1-1.1 on GA media
These are all security issues fixed in the python311-lmdb-2.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1012-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed …
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1026-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fixed …
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:1039-1 11 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:1002-1 11 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1014-1 6 CVEs
Security update 5.0.7 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed …
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:1013-1 11 CVEs
Security update 5.0.7 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Version update to 1.1.0: * Retry DHCP requests up to 3 times (bsc#1253004) golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization and update golang-github-boynux-squid_expor…
first Mar 25, 2026 -
Medium max 5.3SUSE-SU-2026:1011-1 1 CVE
Security update 5.0.7 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization and update golang-github-boynux-squid_exporter: - Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes (j…
first Mar 25, 2026 -
Critical max 9.8SUSE-SU-2026:1008-1 5 CVEs
Security update for Prometheus
This update for Prometheus fixes the following issues: golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fi…
first Mar 25, 2026 -
High max 8.9openSUSE-SU-2026:10431-1 1 CVE
python311-oci-sdk-2.168.3-1.1 on GA media
These are all security issues fixed in the python311-oci-sdk-2.168.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2026 -
Medium max 5.1SUSE-SU-2026:1005-1 2 CVEs
Security update for giflib
This update for giflib fixes the following issues: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:1028-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…
first Mar 25, 2026 -
High max 7.8SUSE-SU-2026:1003-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2…
first Mar 25, 2026 -
Medium max 4.8SUSE-SU-2026:1004-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 25, 2026 -
High max 7.5SUSE-SU-2026:20766-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Mar 19, 2026 -
High max 8.7SUSE-SU-2026:20770-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 23, 2026 -
Medium max 5.3SUSE-SU-2026:20769-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Mar 20, 2026 -
Medium max 6.3SUSE-SU-2026:20768-1 8 CVEs
Security update for python311
This update for python311 fixes the following issues: Updated to Python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: qua…
first Mar 20, 2026 -
Medium max 5.3SUSE-SU-2026:20767-1 1 CVE
Security update for libssh
This update for libssh fixes the following issue: - CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
first Mar 19, 2026 -
Medium max 5.3SUSE-SU-2026:20762-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459). Other fixes: - Bug fixes for “AAT” shaping, and other shaping mic…
first Mar 20, 2026 -
High max 8.7SUSE-SU-2026:20761-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 20, 2026 -
High max 8.7SUSE-SU-2026:20797-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…
first Mar 23, 2026 -
Medium max 6.3SUSE-SU-2026:20796-1 8 CVEs
Security update for python311
This update for python311 fixes the following issues: Updated to Python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: qua…
first Mar 19, 2026 -
Medium max 5.9openSUSE-SU-2026:20131-1 2 CVEs
Security update for postgresql17 and postgresql18
This update for postgresql17 and postgresql18 fixes the following issues: Changes in postgresql17, postgresql18: Update to 17.7: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/17.7/ * bsc#1253332, CVE-2025-12817: Mis…
first Mar 18, 2026 -
High max 7.5SUSE-SU-2026:20795-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20794-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to version 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 19, 2026 -
High max 7.5SUSE-SU-2026:20771-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to sqlite3 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). …
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:20760-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 20, 2026 -
Medium max 5.4SUSE-SU-2026:20759-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …
first Mar 20, 2026 -
High max 7.2SUSE-SU-2026:20758-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …
first Mar 19, 2026 -
Critical max 9.8SUSE-SU-2026:20756-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
first Mar 19, 2026 -
Medium max 6.5SUSE-SU-2026:20755-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
first Mar 19, 2026 -
High max 8.2SUSE-SU-2026:20753-1 2 CVEs
Security update for protobuf
This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…
first Mar 18, 2026 -
High max 8.2SUSE-SU-2026:20752-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…
first Mar 18, 2026 -
Critical max 9.8SUSE-SU-2026:20751-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).
first Mar 18, 2026 -
High max 8.3SUSE-SU-2026:20750-1 3 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020) - CVE-2025-28162: Fixed a memory leaks when running `pngimage`. (bsc#1257364) - CVE-2025-28164: Fixed a …
first Mar 17, 2026