35,660 results · Feed
-
Medium max 6.9SUSE-SU-2026:20695-1 1 CVE
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257325).
first Mar 4, 2026 -
Medium max 5.3SUSE-SU-2026:20694-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: an invalid number of mechanisms may cause unbounded memory consumption (bcs#1253904).
first Mar 4, 2026 -
Medium max 6.5SUSE-SU-2026:20693-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Update to version 10.0.8 - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)
first Mar 13, 2026 -
Medium max 6.9SUSE-SU-2026:20688-1 1 CVE
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Mar 9, 2026 -
Medium max 5.1SUSE-SU-2026:20686-1 1 CVE
Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer
This update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer fixes the following issues: Chan…
first Mar 5, 2026 -
Medium max 5.3SUSE-SU-2026:20685-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - Update to version 3.19.1: * CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents (bsc#1251442) * CVE-2025-58190: golang.org/x/net/html: Fixed x…
first Mar 5, 2026 -
Medium max 6.8SUSE-SU-2026:20684-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
first Mar 5, 2026 -
High max 7.2SUSE-SU-2026:20682-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …
first Mar 6, 2026 -
High max 7.8SUSE-SU-2026:20681-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.8SUSE-SU-2026:20680-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.8SUSE-SU-2026:20679-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.8SUSE-SU-2026:20678-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
UnscoredSUSE-SU-2026:20676-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_17
This update for kernel-livepatch-MICRO-6-0_Update_17 fixes the following issues: Initial livepatch for Update 17 of SLE Micro 6.0 and 6.1 kernel.
first Mar 11, 2026 -
High max 7.8SUSE-SU-2026:20674-1 1 CVE
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.8SUSE-SU-2026:20673-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.8SUSE-SU-2026:20672-1 1 CVE
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 5, 2026 -
High max 7.5SUSE-SU-2026:20668-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…
first Mar 12, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi: m…
first Mar 11, 2026 -
Medium max 6.5SUSE-SU-2026:20666-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)
first Mar 11, 2026 -
Medium max 6.3SUSE-SU-2026:20665-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control chara…
first Mar 10, 2026 -
Low max 3.7SUSE-SU-2026:20664-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).
first Mar 10, 2026 -
Low max 3.6SUSE-SU-2026:20662-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh: // URI when a ProxyCommand is used …
first Mar 10, 2026 -
Medium max 6.8SUSE-SU-2026:20661-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).
first Mar 10, 2026 -
High max 8.8SUSE-SU-2026:20659-1 2 CVEs
Security update for zlib
This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…
first Mar 9, 2026 -
Medium max 6.2SUSE-SU-2026:20657-1 6 CVEs
Security update for libxslt, libxml2
This update for libxslt, libxml2 fixes the following issues: libxml2: - CVE-2026-0990: call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811) - CVE-2026-0992: excessive resource consu…
first Mar 6, 2026 -
High max 8.9SUSE-SU-2026:20656-1 3 CVEs
Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1254041). - CVE-2025-47913: client process termination when receiving an unexpected message type in res…
first Mar 6, 2026 -
High max 8.2SUSE-SU-2026:20655-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-26007: missing validation can lead to security issues for signature verification (ECDSA) and shared key negotiation (ECDH) (bsc#1258074).
first Mar 5, 2026 -
Medium max 5.3SUSE-SU-2026:20654-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in th…
first Mar 5, 2026 -
Medium max 6.9SUSE-SU-2026:20653-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Mar 4, 2026 -
UnscoredSUSE-SU-2026:20652-1 0 CVEs
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002) - Removed: - Baltimore CyberTrust Root - CommScope Public Trust ECC Root-01 - CommScope Public Trust ECC Root-02 - CommScope Publ…
first Mar 4, 2026 -
Medium max 5.3SUSE-SU-2026:20651-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: an invalid number of mechanisms may cause unbounded memory consumption (bcs#1253904).
first Mar 4, 2026 -
High max 8.6SUSE-SU-2026:20649-1 9 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-32049: denial of service attack to websocket server (bsc#1240751). - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1536: …
first Mar 3, 2026 -
UnscoredSUSE-SU-2026:20648-1 1 CVE
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
Medium max 6.2SUSE-SU-2026:20647-1 5 CVEs
Security update for libxml2, libxslt
This update for libxml2, libxslt fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…
first Mar 4, 2026 -
UnscoredSUSE-SU-2026:20646-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
High max 8.1
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …
first Mar 4, 2026 -
UnscoredSUSE-SU-2026:20643-1 1 CVE
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …
first Mar 4, 2026 -
Medium max 6.9SUSE-SU-2026:20642-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
High max 8.4SUSE-SU-2026:20641-1 8 CVEs
Security update for podman
This update for podman fixes the following issues: Changes in podman: - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988) - CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds r…
first Mar 3, 2026