35,648 results · Feed
-
Medium max 6.8SUSE-SU-2026:20748-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257918).
first Mar 17, 2026 -
Medium max 6.8SUSE-SU-2026:20744-1 3 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. (bsc#1257908)
first Mar 16, 2026 -
Critical max 9.8SUSE-SU-2026:0992-1 10 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 24, 2026 -
High max 7.8SUSE-SU-2026:0998-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…
first Mar 24, 2026 -
Medium max 6.7SUSE-SU-2026:0990-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). -…
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0978-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472). Other bug fixes: -Fix rpm scripts to not break swanctl.conf use (bsc#1256442): * Guard rpm migration scripts migrating s…
first Mar 23, 2026 -
High max 7.5openSUSE-SU-2026:10414-1 1 CVE
perl-Crypt-URandom-0.550.0-1.1 on GA media
These are all security issues fixed in the perl-Crypt-URandom-0.550.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0979-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026 -
Critical max 10.0openSUSE-SU-2026:10413-1 38 CVEs
firefox-esr-140.9.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.8SUSE-SU-2026:0984-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2…
first Mar 23, 2026 -
Critical max 9.8SUSE-SU-2026:0997-1 9 CVEs
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0981-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026 -
Critical max 9.8openSUSE-SU-2026:10418-1 1 CVE
python311-jsonpath-ng-1.8.0-1.1 on GA media
These are all security issues fixed in the python311-jsonpath-ng-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Critical max 9.8SUSE-SU-2026:0983-1 10 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.153 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …
first Mar 23, 2026 -
Critical max 9.1openSUSE-SU-2026:10419-1 1 CVE
rclone-1.73.3-1.1 on GA media
These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0980-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-25075: Fixed integer underflow when handling EAP-TTLS AVP (bsc#1259472).
first Mar 23, 2026 -
Critical max 9.1SUSE-SU-2026:0977-1 5 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to go 1.25.8 (bsc#1244485, jsc#SLE-18320): - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: C…
first Mar 23, 2026 -
Low max 3.7SUSE-SU-2026:0987-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: Security issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: - recognize fuse 'portal' as a virtual file system (bsc#1234…
first Mar 24, 2026 -
High max 8.7openSUSE-SU-2026:10417-1 1 CVE
python311-deepdiff-8.6.2-1.1 on GA media
These are all security issues fixed in the python311-deepdiff-8.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5openSUSE-SU-2026:10416-1 1 CVE
python313-PyMuPDF-1.27.2.2-1.1 on GA media
These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
Low max 3.7SUSE-SU-2026:0982-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).
first Mar 23, 2026 -
Critical max 9.1openSUSE-SU-2026:10415-1 8 CVEs
glances-common-4.5.2-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2026 -
High max 7.5SUSE-SU-2026:0976-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Mar 23, 2026 -
High max 7.5SUSE-SU-2026:0993-1 5 CVEs
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 (bsc#1255111, jsc#SLE-18320): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email const…
first Mar 24, 2026 -
Critical max 9.1SUSE-SU-2026:0975-1 3 CVEs
Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2026-27962: JWS `deserialize_compact()` allows for signature bypass by accepting user-controlled embedded JWK as verification key (bsc#1259738). - CVE-2026-28490: cryptographic padding oracle in…
first Mar 23, 2026 -
Medium max 6.7SUSE-SU-2026:0991-1 1 CVE
Security update for systemd
This update for systemd fixes the following issue: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Ch…
first Mar 24, 2026 -
UnscoredSUSE-SU-2026:0950-1 0 CVEs
Security update for docker
This update for docker rebuilds it against the current go 1.25 security release.
first Mar 20, 2026 -
Medium max 5.4SUSE-SU-2026:20738-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229). - CVE-20…
first Mar 18, 2026 -
Medium max 4.8SUSE-SU-2026:20737-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 18, 2026 -
Medium max 4.4SUSE-SU-2026:20732-1 1 CVE
Security update for vim
This update for vim fixes the following issue: Update Vim to version 9.2.0110: - CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
first Mar 17, 2026 -
Medium max 5.3SUSE-SU-2026:20730-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue: Update to freetype2 2.14.2: - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). Changelog: * Several changes related to LCD filtering are implemented to achiev…
first Mar 16, 2026 -
Medium max 5.3SUSE-SU-2026:20726-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue: Update to freetype2 2.14.2: - CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). Changelog: * Several changes related to LCD filtering are implemented to achiev…
first Mar 16, 2026 -
Medium max 5.8SUSE-SU-2026:20727-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header whe…
first Mar 13, 2026 -
Critical max 9.8SUSE-SU-2026:0953-1 9 CVEs
Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …
first Mar 22, 2026 -
Critical max 9.8SUSE-SU-2026:0951-1 8 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-4025…
first Mar 22, 2026 -
UnscoredSUSE-SU-2026:0949-1 0 CVEs
Security update for runc
This update for runc rebuilds it against the current go 1.25 security release.
first Mar 20, 2026 -
Critical max 9.8SUSE-SU-2026:0946-1 7 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: c…
first Mar 22, 2026 -
UnscoredSUSE-SU-2026:0948-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current go 1.25 security release.
first Mar 20, 2026 -
High max 8.2openSUSE-SU-2026:10410-1 1 CVE
pnpm-10.32.1-1.1 on GA media
These are all security issues fixed in the pnpm-10.32.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 23, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-39748: bpf: Forget rang…
first Mar 23, 2026