35,660 results · Feed
-
Medium max 5.3SUSE-SU-2026:20130-1 1 CVE
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20128-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114). - CVE-2025-6199: uninitialized mem…
first Jan 22, 2026 -
Medium max 6.8SUSE-SU-2026:20127-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.1SUSE-SU-2026:20126-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: * Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported (it previously was an experime…
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:20125-1 7 CVEs
Security update for python313
This update for python313 fixes the following issues: - Update to 3.13.11: - Security - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount…
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:20121-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735).
first Jan 22, 2026 -
Low max 1.9SUSE-SU-2026:20120-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 22, 2026 -
High max 8.4SUSE-SU-2026:20116-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376). - CVE-2025-9566: kube play command may overwrite host f…
first Jan 21, 2026 -
High max 7.8
Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Jan 20, 2026 -
Medium max 6.5SUSE-SU-2026:20096-1 3 CVEs
Security update for cargo-c
This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discard_all_messages (bsc#1243179) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249012) - CVE-2024-12224: idna: Fi…
first Jan 19, 2026 -
High max 7.5SUSE-SU-2026:20109-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.8SUSE-SU-2026:20108-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
High max 8.4SUSE-SU-2026:20103-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376). - CVE-2025-9566: kube play command may overwrite host f…
first Jan 21, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Jan 20, 2026 -
Medium max 5.1SUSE-SU-2026:20095-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2851> - Update to Docker 28.5.0-ce. See upstream changelog online at <https:…
first Jan 17, 2026 -
High max 7.8
Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Jan 20, 2026 -
UnscoredSUSE-SU-2026:20099-1 0 CVEs
Security update for rust1.91, rust1.92
This update for rust1.91 and rust1.92 fixes the following issues: Rust is shipped in 1.91.0 version. Please see https://github.com/rust-lang/rust/releases/tag/1.91.0 for changes. Rust is shipped in 1.92.0 version. Please see https://github.com/rust-lang/rust/…
first Jan 19, 2026 -
High max 7.5SUSE-SU-2026:20094-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2026:20093-1 2 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…
first Jan 13, 2026 -
High max 7.5SUSE-SU-2026:20092-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2026:20091-1 2 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…
first Jan 13, 2026 -
Critical max 10.0SUSE-SU-2026:20090-1 2 CVEs
Security update for cpp-httplib
This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests (bsc#1254734). - …
first Jan 15, 2026 -
High max 7.5SUSE-SU-2026:20089-1 3 CVEs
Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251509). - CVE-2025-58190: golang.org…
first Jan 15, 2026 -
Medium max 6.9SUSE-SU-2026:20088-1 3 CVEs
Security update for erlang
This update for erlang fixes the following issues: Update the ssh component to the latest in the maint-27 branch. Security issues fixed: - CVE-2025-48040: ssh: overly tolerant handling of data received from unauthenticated users when processing key exchange m…
first Jan 15, 2026 -
Critical max 9.8SUSE-SU-2026:20086-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 (bsc#1256340) * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due…
first Jan 15, 2026 -
High max 8.6SUSE-SU-2026:20085-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - Upgrade to release 9.20.15 Security Fixes: * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379) * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380) * CVE-2025-…
first Jan 15, 2026 -
Critical max 9.6SUSE-SU-2026:20084-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.111 - Security fixes: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: improper neutralization of Escape, Meta, or …
first Jan 14, 2026 -
Medium max 6.3SUSE-SU-2026:20082-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-1…
first Jan 14, 2026 -
High max 8.3SUSE-SU-2026:20081-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME), unintended retry intervals (bsc#1254511) - CVE-2025-58098: Fixed Server Side Includes adds query string to #exec cmd (bsc#1254512) - CVE-2025-65082: Fixed CGI environme…
first Jan 14, 2026 -
High max 7.8SUSE-SU-2026:20080-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…
first Jan 14, 2026 -
Critical max 10.0SUSE-SU-2026:20078-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2025-59362: SNMP message …
first Jan 14, 2026 -
High max 8.1SUSE-SU-2026:20077-1 2 CVEs
Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries (bsc#1252399) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#124901…
first Jan 13, 2026 -
High max 7.7SUSE-SU-2026:20074-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …
first Jan 12, 2026 -
High max 7.1SUSE-SU-2026:20073-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20072-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20071-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 12, 2026 -
Critical max 9.8SUSE-SU-2026:20059-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-536…
first Jan 7, 2026 -
Medium max 4.4SUSE-SU-2026:20064-1 3 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765). - CVE-2024-8006: missing return value check in `pcap_find…
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:20062-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 8, 2026 -
High max 8.1SUSE-SU-2026:20061-1 4 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update OpenvSwitch to v3.1.7 and OVN to v23.03.3: Security issues fixed: - CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets (bsc#1219465). - …
first Jan 8, 2026