35,660 results · Feed
-
Medium max 5.5SUSE-SU-2026:0603-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979) - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
first Feb 24, 2026 -
High max 8.8SUSE-SU-2026:0602-1 1 CVE
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox 140.7.1 ESR - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. (bsc#1258231)
first Feb 24, 2026 -
Medium max 6.0SUSE-SU-2026:0590-1 4 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. (bsc#1257031) - CVE-2026-0865: Fixed a bug where a user-controlled header contai…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0589-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: buffer overrun with shadow paging + tracing (XSA-477) (bsc#1256745). - CVE-2026-23553: incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747).
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0588-1 4 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Update to version 16.12. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing …
first Feb 20, 2026 -
Critical max 9.8SUSE-SU-2026:0587-1 171 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses to …
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0586-1 4 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: Update to version 17.8. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0585-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.8SUSE-SU-2026:0584-1 5 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: intarray missing v…
first Feb 20, 2026 -
High max 8.3SUSE-SU-2026:0583-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
first Feb 20, 2026 -
Medium max 6.8SUSE-SU-2026:0582-1 1 CVE
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927).
first Feb 20, 2026 -
Medium max 6.8SUSE-SU-2026:0581-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).
first Feb 20, 2026 -
Medium max 5.3SUSE-SU-2026:0580-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2025-58190: Fixed a HTML parser misimplementation of a part of the HTML specification for table related tags. (bsc#1258048). - CVE-2025-47911: Fixed an issue where the HTML parser takes a very long t…
first Feb 19, 2026 -
High max 8.6SUSE-SU-2026:0579-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection (bsc#1257440). - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read…
first Feb 19, 2026 -
Medium max 5.9SUSE-SU-2026:0576-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to version 20230802.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 18, 2026 -
Low max 1.9SUSE-SU-2026:0575-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Feb 18, 2026 -
High max 8.6SUSE-SU-2026:0574-1 3 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bou…
first Feb 18, 2026 -
Medium max 6.8SUSE-SU-2026:0569-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: Security fixes: - CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following (bsc#1257116) Other fixes: - Fixed FIPS mode (bsc#1248002)
first Feb 17, 2026 -
Medium max 6.2SUSE-SU-2026:0568-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Feb 17, 2026 -
Medium max 6.5SUSE-SU-2026:0567-1 5 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…
first Feb 17, 2026 -
High max 7.8SUSE-SU-2026:0566-1 3 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 17, 2026 -
High max 7.7SUSE-SU-2026:0559-1 8 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). - CVE-2026-22854: server-controlled read length is used to read file data into an IRP outpu…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0561-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…
first Feb 16, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0557-1 2 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…
first Feb 16, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-ti…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0551-1 2 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0550-1 3 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sun…
first Feb 16, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu…
first Feb 16, 2026 -
High max 7.8SUSE-SU-2026:0542-1 3 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.103 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 15, 2026 -
UnscoredSUSE-SU-2026:0533-1 1 CVE
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.179 fixes one security issue The following security issue was fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
first Feb 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potential…
first Feb 15, 2026 -
High max 7.8
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…
first Feb 14, 2026 -
High max 8.1SUSE-SU-2026:0525-1 1 CVE
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes one security issue The following security issue was fixed: - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439). The following non security issue w…
first Feb 14, 2026 -
High max 8.1SUSE-SU-2026:0524-1 2 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_…
first Feb 14, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…
first Feb 14, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.244 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…
first Feb 14, 2026 -
High max 8.2SUSE-SU-2026:0517-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).
first Feb 14, 2026