35,660 results · Feed
-
High max 8.1
Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0514-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
Medium max 6.1SUSE-SU-2026:0510-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Feb 13, 2026 -
Medium max 6.3SUSE-SU-2026:0508-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc…
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0506-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
Medium max 6.8SUSE-SU-2026:0505-1 1 CVE
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …
first Feb 13, 2026 -
High max 7.5SUSE-SU-2026:0504-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…
first Feb 13, 2026 -
High max 8.1SUSE-SU-2026:0503-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962). - CVE-2026-23952: pr…
first Feb 13, 2026 -
High max 8.4SUSE-SU-2026:0499-1 1 CVE
Security update for glibc-livepatches
This update for glibc-livepatches fixes the following issues: - CVE-2026-0861: Fixed that inadequate size check in the memalign suite may result in an integer overflow (bsc#1256913)
first Feb 13, 2026 -
High max 7.5SUSE-SU-2026:0498-1 4 CVEs
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-6…
first Feb 13, 2026 -
High max 8.6SUSE-SU-2026:0497-1 3 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read_until to avoid a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bounds rea…
first Feb 13, 2026 -
Critical max 9.8SUSE-SU-2026:0496-1 50 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2023-54142: gtp: Fix use-af…
first Feb 13, 2026 -
High max 8.8SUSE-SU-2026:0495-1 25 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix …
first Feb 13, 2026 -
High max 8.8SUSE-SU-2026:0494-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2023-27534: Regression fix for SFTP path ~ resolving discrepancy (bsc#1219273)
first Feb 13, 2026 -
High max 8.1SUSE-SU-2026:0491-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don…
first Feb 13, 2026 -
High max 8.1
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). -…
first Feb 13, 2026 -
High max 8.1
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-t…
first Feb 13, 2026 -
Critical max 9.1SUSE-SU-2026:0477-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2025-68670: Fix a potential overflow when processing user domain information. (bsc#1257362)
first Feb 12, 2026 -
High max 7.5SUSE-SU-2026:0476-1 1 CVE
Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)
first Feb 12, 2026 -
High max 8.8SUSE-SU-2026:0475-1 25 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix inc…
first Feb 12, 2026 -
Critical max 9.8SUSE-SU-2026:0474-1 50 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2023-54142: gtp: Fix use-after…
first Feb 12, 2026 -
Critical max 9.8SUSE-SU-2026:0472-1 172 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses …
first Feb 12, 2026 -
Critical max 9.8SUSE-SU-2026:0471-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842). - CVE-2025-40259: scsi: sg: Do not sleep in atomic cont…
first Feb 12, 2026 -
Medium max 6.8SUSE-SU-2026:0470-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Feb 12, 2026 -
Medium max 4.3SUSE-SU-2026:0469-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
first Feb 12, 2026 -
High max 7.1SUSE-SU-2026:0460-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 11, 2026 -
Low max 3.7SUSE-SU-2026:0458-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 11, 2026 -
UnscoredSUSE-SU-2026:0456-1 0 CVEs
Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda
This update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda fixes the following issues: Changes in nvidia-open-driver-G06-signed: - updated CUDA variant to version 580.126.09 - update non-CUDA variant to version 580.126.09 (b…
first Feb 11, 2026 -
Critical max 9.8SUSE-SU-2026:0447-1 171 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses to cep…
first Feb 11, 2026 -
Medium max 6.5SUSE-SU-2026:0445-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2026-0665: Added PIRQ bounds check in xen_physdev_map_pirq to avoid an out-of-bounds heap. (bsc#1256484) Other fixes: - Fixed that QEMU migration fails if a qemu-vdagent channel is present in the VM (bsc#…
first Feb 11, 2026 -
Low max 2.9SUSE-SU-2026:0444-1 1 CVE
Security update for uriparser
This update for uriparser fixes the following issues: - CVE-2025-67899: large input containing many commas can cause unbounded recursion and stack consumption (bsc#1255000).
first Feb 11, 2026 -
High max 8.9SUSE-SU-2026:0443-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0441-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0440-1 6 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-14550: Fixed potential denial-of-service via repeated headers when using ASGI(bsc#1257403) - CVE-2026-1312: Fixed potential SQL injection via QuerySet.order_by and FilteredRelation (bsc#1257…
first Feb 11, 2026 -
High max 7.8SUSE-SU-2026:0442-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-0797: Fixed a heap-based buffer overflow in the parsing of ICO files. (bsc#1257549)
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0439-1 10 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: Security fixes: - CVE-2024-45310: Fixed runc being tricked into creating empty files/directories on host (bsc#1257432) - CVE-2025-65105: Fixed security bypass due to disabling security options (bsc#1255462…
first Feb 11, 2026 -
High max 8.1SUSE-SU-2026:0438-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…
first Feb 11, 2026 -
High max 8.1SUSE-SU-2026:0437-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0435-1 7 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 (bsc#1256848) - CVE-2025-59465: Add TLSSocket default error handler (bsc#1256573) - CVE-2025-55132: Disable futimes when permission model is e…
first Feb 11, 2026 -
High max 8.4SUSE-SU-2026:0434-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: Security fixes: - CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396) - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'F…
first Feb 11, 2026