35,507 results · Feed
-
High max 8.5SUSE-SU-2026:5142-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issue: - CVE-2026-104620: local privilege escalation by any local user can call `InstallFiles` with the `SIMULATE` flag without a `polkit` check (bsc#1284954).
first Nov 9, 2026 -
Medium max 4.4SUSE-SU-2026:5139-1 2 CVEs
Security update for xen
This update for xen fixes the following issue: - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).
first Nov 9, 2026 -
High max 8.8SUSE-SU-2026:5135-1 12 CVEs
Security update for dpdk22
This update for dpdk22 fixes the following issues: - CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup (bsc#1285678). - CVE-2026-86563: double offset bug in vhost log mapping calculation (bsc#1285676). - CVE-2026-86565: s…
first Nov 9, 2026 -
Medium max 6.5SUSE-SU-2026:5136-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issue: - CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817).
first Nov 9, 2026 -
Critical max 9.2SUSE-SU-2026:5137-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).
first Nov 9, 2026 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptograp…
first Nov 9, 2026 -
Medium max 5.9SUSE-SU-2026:5134-1 4 CVEs
Security update for aspell
This update for aspell fixes the following issues: - CVE-2026-75818: heap-based buffer overflow in the decompressor in `prog/prezip.c` can lead to memory corruption and process crash (bsc#1284337). - CVE-2026-75819: out-of-bounds read in `ReadOnlyDict::load()…
first Nov 9, 2026 -
Medium max 4.3SUSE-SU-2026:5138-1 1 CVE
Security update for zchunk
This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144).
first Nov 9, 2026 -
Critical max 9.1SUSE-RU-2026:5150-1 1 CVE
Recommended update for openssl-3
This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…
first Nov 9, 2026 -
High max 8.5SUSE-SU-2026:5141-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issue: - CVE-2026-104620: local privilege escalation by any local user can call `InstallFiles` with the `SIMULATE` flag without a `polkit` check (bsc#1284954).
first Nov 9, 2026 -
Medium max 5.4SUSE-SU-2026:5131-1 1 CVE
Security update for libjxl
This update for libjxl fixes the following issue: - CVE-2026-82522: integer underflow via 64-bit box size truncation on 32-bit systems can lead to phantom box parsing and arbitrary metadata injection (bsc#1278308).
first Nov 9, 2026 -
High max 8.8SUSE-SU-2026:5140-1 9 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838). - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839). - CVE-2026-79603: uncondit…
first Nov 9, 2026 -
High max 8.8SUSE-SU-2026:5144-1 2 CVEs
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2026-41651: local root exploit security vulnerability (bsc#1262220). - CVE-2026-104620: local privilege escalation by any local user can call `InstallFiles` with the `SIMULATE` flag without a `polki…
first Nov 9, 2026 -
High max 8.5SUSE-SU-2026:5143-1 2 CVEs
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2026-104619: PackageKit ZYpp rollback vulnerability (bsc#1284389). - CVE-2026-104620: local privilege escalation by any local user can call `InstallFiles` with the `SIMULATE` flag without a `polkit`…
first Nov 9, 2026 -
Critical max 9.2
Security update for nodejs22
This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…
first Oct 30, 2026 -
UnscoredSUSE-SU-2026:24603-1 0 CVEs
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image (bsc#1286378).
first Nov 2, 2026 -
Low max 2.3openSUSE-SU-2026:12492-1 1 CVE
libQt6WebSockets6-6.12.0-2.1 on GA media
These are all security issues fixed in the libQt6WebSockets6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 4.3openSUSE-SU-2026:12486-1 1 CVE
libsndfile-devel-1.2.2-8.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-8.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 6.5openSUSE-SU-2026:12494-1 1 CVE
vsftpd-3.0.5-20.1 on GA media
These are all security issues fixed in the vsftpd-3.0.5-20.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
High max 7.8openSUSE-SU-2026:12493-1 10 CVEs
lemon-3.54.1-2.1 on GA media
These are all security issues fixed in the lemon-3.54.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 6.9openSUSE-SU-2026:12484-1 1 CVE
headroom-0.42.0-1.1 on GA media
These are all security issues fixed in the headroom-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
UnscoredopenSUSE-SU-2026:12489-1 0 CVEs
perl-Mail-Sendmail-0.830.0-1.1 on GA media
These are all security issues fixed in the perl-Mail-Sendmail-0.830.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 4.3openSUSE-SU-2026:12487-1 1 CVE
libmupdf28_6-1.28.6-2.1 on GA media
These are all security issues fixed in the libmupdf28_6-1.28.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
High max 7.0openSUSE-SU-2026:12483-1 1 CVE
gdb-17.2-1.1 on GA media
These are all security issues fixed in the gdb-17.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 6.3openSUSE-SU-2026:12481-1 1 CVE
ansible-lint-26.11.0-2.1 on GA media
These are all security issues fixed in the ansible-lint-26.11.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 6.5openSUSE-SU-2026:12482-1 4 CVEs
cpp16-16.2.1+git9901-1.1 on GA media
These are all security issues fixed in the cpp16-16.2.1+git9901-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 9.1openSUSE-SU-2026:12490-1 1 CVE
perl-Math-Clipper-1.300.0-1.1 on GA media
These are all security issues fixed in the perl-Math-Clipper-1.300.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
High max 7.5openSUSE-SU-2026:12491-1 1 CVE
python313-pyasn1-0.6.5-1.1 on GA media
These are all security issues fixed in the python313-pyasn1-0.6.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Medium max 6.3openSUSE-SU-2026:12485-1 1 CVE
laszip-devel-3.5.0-2.1 on GA media
These are all security issues fixed in the laszip-devel-3.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
Critical max 10.0openSUSE-SU-2026:12488-1 1 CVE
openai-codex-0.166.0-2.1 on GA media
These are all security issues fixed in the openai-codex-0.166.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2026 -
UnscoredopenSUSE-SU-2026:12480-1 0 CVEs
git-annex-10.20261026-1.1 on GA media
These are all security issues fixed in the git-annex-10.20261026-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 7, 2026 -
High max 7.8SUSE-SU-2026:24558-1 79 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: - Update CUDA and non-CUDA variant to 580.196.07 (bsc#1286887). - Added CVEs for security release 580.178.04 (bsc#1270255): CVE-2026-47587, CVE-2026-47567, CVE-2026-47566, CVE-2026-4759…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24562-1 10 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
Critical max 9.2
Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).
first Oct 29, 2026 -
Critical max 9.8SUSE-SU-2026:24564-1 11 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…
first Nov 2, 2026 -
Critical max 9.1SUSE-SU-2026:24555-1 5 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing…
first Oct 29, 2026 -
Medium max 5.3openSUSE-SU-2026:12476-1 1 CVE
python313-mistune-3.4.0-3.1 on GA media
These are all security issues fixed in the python313-mistune-3.4.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
Medium max 6.8openSUSE-SU-2026:12470-1 1 CVE
pluto-5.24.5-1.1 on GA media
These are all security issues fixed in the pluto-5.24.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
High max 7.5openSUSE-SU-2026:12478-1 4 CVEs
skopeo-1.24.0-2.1 on GA media
These are all security issues fixed in the skopeo-1.24.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026 -
High max 7.5openSUSE-SU-2026:12456-1 2 CVEs
google-extension-manager-20261105.00-1.1 on GA media
These are all security issues fixed in the google-extension-manager-20261105.00-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2026