35,660 results · Feed
-
UnscoredSUSE-SU-2026:20637-1 1 CVE
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
UnscoredSUSE-SU-2026:20636-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …
first Mar 4, 2026 -
UnscoredSUSE-SU-2026:20634-1 1 CVE
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).
first Mar 4, 2026 -
Medium max 6.2SUSE-SU-2026:20631-1 5 CVEs
Security update for libxml2, libxslt
This update for libxml2, libxslt fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…
first Mar 4, 2026 -
Critical max 9.1SUSE-SU-2026:20629-1 19 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: - Update to version 1.24.13 (jsc#SLE-18320) - CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information. (bsc#1251255) - CVE-2025-61725: net/mail: excessive CPU consu…
first Mar 3, 2026 -
Medium max 6.9SUSE-SU-2026:20627-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…
first Mar 3, 2026 -
High max 8.4SUSE-SU-2026:20626-1 8 CVEs
Security update for podman
This update for podman fixes the following issues: Changes in podman: - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988) - CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds r…
first Mar 3, 2026 -
Critical max 9.1SUSE-SU-2026:20623-1 18 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: - Update to version 1.25.7 (jsc#SLE-18320) - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821) - CVE-2025-68119: cmd/go: unexpected code e…
first Mar 3, 2026 -
High max 7.5SUSE-SU-2026:20621-1 1 CVE
Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)
first Mar 1, 2026 -
Medium max 4.8SUSE-SU-2026:20620-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
Critical max 9.8SUSE-SU-2026:20615-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
High max 7.5SUSE-SU-2026:20617-1 1 CVE
Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)
first Mar 1, 2026 -
Medium max 4.8SUSE-SU-2026:20616-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
UnscoredSUSE-SU-2026:20611-1 0 CVEs
Security update for the initial kernel livepatch
This update contains initial livepatches for the SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel update.
first Feb 27, 2026 -
High max 9.8SUSE-SU-2026:20607-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2025-11187: Fixed improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Fixed stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1…
first Feb 18, 2026 -
High max 8.1SUSE-SU-2026:20606-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes one security issue The following security issue was fixed: - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
first Feb 18, 2026 -
High max 8.2SUSE-SU-2026:20604-1 1 CVE
Security update for assertj-core
This update for assertj-core fixes the following issues: Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion (bsc#1257293).
first Mar 2, 2026 -
Medium max 5.5SUSE-SU-2026:20603-1 1 CVE
Security update for rhino
This update for rhino fixes the following issues: Update to 1.7.15.1: - CVE-2025-66453: Fixed a problem with formatting of floating-point numbers to strings that may result in DoS (bsc#1254481).
first Mar 2, 2026 -
High max 7.5SUSE-SU-2026:20600-1 2 CVEs
Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-53629: header can allocate memory arbitrarily in the server, potentially leading to its exhaustion (bsc#1246471). - CVE-2025-53628: HTTP header smuggling due to insecure trailers merge (bsc#12…
first Mar 2, 2026 -
Critical max 9.8SUSE-SU-2026:20599-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Medium max 5.5SUSE-SU-2026:20592-1 2 CVEs
Security update for 7zip
This update for 7zip fixes the following issues: - Update to 25.01 (boo#1249130) * The code for handling symbolic links has been changed to provide greater security when extracting files from archives * Command line switch -snld20 can be used to bypass defaul…
first Feb 26, 2026 -
High max 8.9SUSE-SU-2026:20591-1 3 CVEs
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…
first Feb 26, 2026 -
Low max 3.3SUSE-SU-2026:20590-1 1 CVE
Security update for autogen
This update for autogen fixes the following issues: - CVE-2025-8746: Fixed improper input validation and memory bounds checking when processing certain malformed configuration files (bsc#1247921)
first Feb 26, 2026 -
High max 8.8SUSE-SU-2026:20588-1 6 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:20587-1 6 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
UnscoredSUSE-SU-2026:20585-1 0 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - Enable SELinux in default daemon.json config (--selinux-enabled). This has no practical impact on non-SELinux systems (bsc#1252290). - Remove git-core recommends on SLE. Most SLE systems have install…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:20582-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: * Fixed: Security fix. MFSA 2026-10 (bsc#1258231): * CVE-2026-2447: Heap buffer overflow in libvpx.
first Feb 19, 2026 -
Medium max 6.0SUSE-SU-2026:20581-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
Medium max 4.8SUSE-SU-2026:20557-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976) - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
first Feb 27, 2026 -
UnscoredSUSE-SU-2026:20556-1 0 CVEs
Security update for the initial kernel livepatch
This update contains initial livepatches for the SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel update.
first Feb 27, 2026 -
Critical max 9.8SUSE-SU-2026:20555-1 205 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptc…
first Feb 27, 2026 -
Medium max 6.0SUSE-SU-2026:20543-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.12. Security issues fixed: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-15…
first Feb 19, 2026 -
High max 9.8SUSE-SU-2026:20542-1 4 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2025-11187: Fixed improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Fixed stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1…
first Feb 18, 2026 -
High max 8.1SUSE-SU-2026:20541-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes one security issue The following security issue was fixed: - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
first Feb 18, 2026 -
Medium max 6.9SUSE-SU-2026:20540-1 2 CVEs
Security update for cockpit-repos
This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325). - CVE-2025-64718: js-y…
first Feb 18, 2026 -
Medium max 5.3SUSE-SU-2026:20539-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).
first Feb 18, 2026 -
Medium max 6.9SUSE-SU-2026:20538-1 1 CVE
Security update for cockpit-machines, cockpit
This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324) Changes in cockpit-machines: - Update to 346 * 346 - Performance improvements - Translation updat…
first Feb 17, 2026 -
Medium max 6.5SUSE-SU-2026:20531-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Feb 26, 2026 -
High max 8.3SUSE-SU-2026:20530-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: Fixed a heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020). - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). - CVE-2025-28164: memory …
first Feb 26, 2026