35,660 results · Feed
-
Medium max 6.9SUSE-SU-2026:20338-1 1 CVE
Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global (bsc#1257325).
first Feb 6, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…
first Jan 19, 2026 -
High max 8.6SUSE-SU-2026:20245-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399).
first Jan 16, 2026 -
High max 7.5SUSE-SU-2026:20244-1 6 CVEs
Security update for elemental-toolkit, elemental-operator
This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to version 1.6.10: * Remove 'latest' tag as this overlaps with the latest branch * Bump github.com/rancher-sandbox/go-tpm and its dependencies This …
first Jan 15, 2026 -
High max 7.8SUSE-SU-2026:20243-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
Critical max 9.8SUSE-SU-2026:20242-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: missing checks when validating elliptic curve points allows for cryptographic bypass (bsc#1256070).
first Jan 13, 2026 -
High max 8.6SUSE-SU-2026:20238-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP r…
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:20237-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:20236-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026 -
Low max 2.3SUSE-SU-2026:20235-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issues: - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249011)
first Feb 5, 2026 -
Low max 3.7SUSE-SU-2026:20234-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).
first Feb 5, 2026 -
Low max 3.7SUSE-SU-2026:20233-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).
first Feb 5, 2026 -
High max 8.0SUSE-SU-2026:20231-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783). - CVE-2025-58436: slow client communication leads to a possible…
first Feb 4, 2026 -
High max 8.0SUSE-SU-2026:20229-1 4 CVEs
Security update for cups
This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783). - CVE-2025-58436: slow client communication leads to a possible…
first Feb 4, 2026 -
Critical max 9.8SUSE-SU-2026:20228-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026 -
High max 8.8SUSE-SU-2026:20223-1 12 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).…
first Feb 2, 2026 -
High max 7.8SUSE-SU-2026:20222-1 8 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.4.13: - CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933). - CVE-2025-13499: Kafka dissector crash (bsc#1254108). - CVE-2025-13945: HTTP3 dissector crash (bsc#1254471). - CV…
first Feb 2, 2026 -
Medium max 6.3SUSE-SU-2026:20216-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 30, 2026 -
High max 7.5SUSE-SU-2026:20215-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.2+10 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 30, 2026 -
High max 8.6SUSE-SU-2026:20212-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library (bsc#1250562). - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code …
first Jan 30, 2026 -
Medium max 5.4SUSE-SU-2026:20221-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Critical max 9.8SUSE-SU-2026:20220-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026 -
Medium max 6.5SUSE-SU-2026:20218-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
High max 7.1SUSE-SU-2026:20217-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 2, 2026 -
High max 8.4SUSE-SU-2026:20214-1 4 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion (bsc#1255333): - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/op…
first Jan 30, 2026 -
High max 8.5SUSE-SU-2026:20213-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502).
first Jan 30, 2026 -
High max 8.8SUSE-SU-2026:20211-1 12 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).…
first Feb 2, 2026 -
Medium max 5.4SUSE-SU-2026:20210-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 2, 2026 -
Critical max 9.8SUSE-SU-2026:20207-1 215 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…
first Feb 2, 2026 -
UnscoredSUSE-SU-2026:20203-1 0 CVEs
Security update for ucode-amd
This update for ucode-amd fixes the following issues: Changes in ucode-amd: - Update to version 20251203 (git commit a0f0e52138e5): * linux-firmware: Update amd-ucode copyright information * linux-firmware: Update AMD cpu microcode - Update to version 2025111…
first Jan 28, 2026 -
Medium max 6.5SUSE-SU-2026:20209-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network …
first Feb 2, 2026 -
High max 8.5SUSE-SU-2026:20206-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502).
first Jan 30, 2026 -
High max 8.6SUSE-SU-2026:20205-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library (bsc#1250562). - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code …
first Jan 30, 2026 -
Critical max 9.8SUSE-SU-2026:20202-1 3 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251982). - CVE-2025-40204: sctp: Fix M…
first Jan 28, 2026 -
Medium max 5.9SUSE-SU-2026:20193-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming…
first Jan 29, 2026 -
Medium max 5.7SUSE-SU-2026:20201-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).
first Jan 30, 2026 -
Medium max 5.3SUSE-SU-2026:20200-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range check…
first Jan 30, 2026 -
High max 7.5SUSE-SU-2026:20199-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Jan 29, 2026 -
High max 8.4SUSE-SU-2026:20198-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…
first Jan 29, 2026 -
Medium max 4.6SUSE-SU-2026:20196-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
first Jan 29, 2026