35,660 results · Feed
-
Medium max 4.3SUSE-SU-2026:20058-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 2, 2026 -
High max 7.5SUSE-SU-2026:20057-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference (bsc#1253177). - CVE-2025-62689: Fixed heap-based buffer overflow(bsc#1253178).
first Jan 2, 2026 -
High max 7.4SUSE-SU-2026:20055-1 2 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 22.11.10. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network…
first Dec 30, 2025 -
Medium max 4.8SUSE-SU-2026:20054-1 2 CVEs
Security update for capstone
This update for capstone fixes the following issues: - CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309). - CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer ov…
first Dec 30, 2025 -
High max 8.2SUSE-SU-2026:20053-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: flaw in HTTP header handling can lead to host header parsing discrepancy between servers and proxies and allow for request smuggling, cache poisoning and bypass of access controls (bsc#1254…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20051-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Jan 12, 2026 -
Medium max 5.5SUSE-SU-2026:20050-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2025-13193: external inactive snapshots for shut-down VMs that are incorrectly created as world-readable allow unprivileged users to inspect guest OS contents (bsc#1253703). - CV…
first Jan 9, 2026 -
High max 8.1SUSE-SU-2026:20049-1 4 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update OpenvSwitch to v3.1.7 and OVN to v23.03.3. Security issues fixed: - CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets (bsc#1219465). - …
first Jan 9, 2026 -
Low max 1.9SUSE-SU-2026:20048-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 8, 2026 -
Medium max 6.3SUSE-SU-2026:20047-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400…
first Jan 8, 2026 -
High max 7.7SUSE-SU-2026:20045-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-13601: Fixed Integer overflow in in g_escape_uri_string() (bsc#1254297) - CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption (bsc#1254662) - CVE-2025-14512: Fixed Int…
first Jan 8, 2026 -
Medium max 4.3SUSE-SU-2026:20044-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 8, 2026 -
High max 7.5SUSE-SU-2026:20043-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: Fixed missing validation of the supplied reason phrase (bsc#1254903) - CVE-2025-67725: Fixed inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905) - CVE…
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:20042-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 8, 2026 -
UnscoredSUSE-SU-2026:20041-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).
first Jan 8, 2026 -
Critical max 9.8SUSE-SU-2026:20039-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-536…
first Jan 7, 2026 -
High max 7.5SUSE-SU-2026:20038-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 8.2.10. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the …
first Jan 6, 2026 -
High max 8.3SUSE-SU-2026:20037-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45229: integer underflow and out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (bsc#1218879). - CVE-2023-45230: out-of-bounds write in the DHCPv6 client through a l…
first Dec 30, 2025 -
High max 7.4SUSE-SU-2026:20036-1 2 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 22.11.10. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and cause a denial of service on the network…
first Dec 30, 2025 -
High max 7.5SUSE-SU-2026:20035-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: lack of message size validation when SSH Agent server is processing new identity requests can lead to out-of-bounds read and an application panic (bsc#1253993). - CVE-2025-47913: receiving a…
first Dec 30, 2025 -
High max 7.7SUSE-SU-2026:20032-1 4 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …
first Jan 12, 2026 -
Critical max 9.8SUSE-SU-2026:20031-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.6.0 ESR was released: * Fixed: Various security fixes. MFSA 2025-94 (bsc#1254551): * CVE-2025-14321: Use-after-free in the WebRTC: Signa…
first Jan 12, 2026 -
High max 7.1SUSE-SU-2026:20030-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20029-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)
first Jan 12, 2026 -
High max 7.5SUSE-SU-2026:20028-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 12, 2026 -
Medium max 5.3SUSE-SU-2026:20027-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
first Jan 11, 2026 -
Critical max 10.0SUSE-SU-2026:20022-1 4 CVEs
Security update of valkey
This update for valkey fixes the following issues: Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution (bsc#1250995) - CVE-2025-46817: Fixed that a Lua script may lead to integer overflow and potentia…
first Jan 7, 2026 -
Critical max 9.8SUSE-SU-2026:20021-1 100 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …
first Dec 19, 2025 -
High max 8.8SUSE-SU-2026:20019-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
first Jan 2, 2026 -
High max 7.0SUSE-SU-2026:20018-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 11.8.5: * CVE-2025-13699: Fixed Directory Traversal Remote Code Execution Vulnerability (bsc#1254313) Other fixes: - Add %license tags to license files (bsc#1252162) - Add INSTALL_DOCREADMEDIR cm…
first Dec 22, 2025 -
Medium max 6.5SUSE-SU-2026:20016-1 1 CVE
Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).
first Dec 22, 2025 -
Critical max 9.8SUSE-SU-2026:20015-1 100 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …
first Dec 19, 2025 -
High max 8.8SUSE-SU-2026:20014-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
first Jan 2, 2026 -
Critical max 9.8SUSE-SU-2026:20012-1 100 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …
first Dec 19, 2025 -
High max 8.7SUSE-SU-2026:0900-1 1 CVE
Security update for python-black
This update for python-black fixes the following issue: - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).
first Mar 13, 2026 -
High max 7.5SUSE-SU-2026:0846-1 1 CVE
Security update for python-Markdown
This update for python-Markdown fixes the following issue: - CVE-2025-69534: incomplete markup declaration in raw HTML can crash applications that process untrusted Markdown (bsc#1259256).
first Mar 6, 2026 -
High max 7.5SUSE-SU-2026:20008-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Dec 22, 2025 -
High max 7.5SUSE-SU-2026:20007-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Dec 22, 2025 -
Medium max 4.8SUSE-SU-2026:0847-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
first Mar 7, 2026 -
High max 7.8SUSE-SU-2026:0748-1 1 CVE
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 2, 2026