35,560 results · Feed
-
Critical max 9.6SUSE-SU-2026:4806-1 85 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…
-
High max 8.8SUSE-SU-2026:4804-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to versio…
-
High max 8.2SUSE-SU-2026:4803-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).
-
High max 7.5SUSE-SU-2026:4802-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
High max 7.5SUSE-SU-2026:4805-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKey…
-
UnscoredSUSE-SU-2026:4801-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59 (jsc#PED-16190): * Fixed a …
-
Medium max 6.2SUSE-SU-2026:4799-1 37 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocati…
-
High max 7.5SUSE-SU-2026:4798-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
-
Critical max 9.2SUSE-SU-2026:4797-1 14 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). - CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resour…
-
UnscoredSUSE-SU-2026:4796-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59: * Fixed a regression introd…
-
High max 7.5SUSE-SU-2026:4795-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
Critical max 9.8SUSE-SU-2026:4793-1 4 CVEs
Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM…
-
Medium max 5.5SUSE-SU-2026:4829-1 1 CVE
Security update for libraw
This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc…
-
Medium max 5.5SUSE-SU-2026:4828-1 1 CVE
Security update for openexr
This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).
-
Medium max 4.8SUSE-SU-2026:4827-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing…
-
UnscoredSUSE-SU-2026:4824-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
-
UnscoredSUSE-SU-2026:4823-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
-
UnscoredSUSE-SU-2026:4822-1 0 CVEs
Security update for docker
This update for docker rebuilds it against the current go security release.
-
High max 7.8SUSE-SU-2026:4819-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
-
Low max 2.5SUSE-SU-2026:4818-1 1 CVE
Security update for mutt
This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).
-
High max 7.5SUSE-SU-2026:4817-1 1 CVE
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).
-
UnscoredSUSE-SU-2026:4814-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59 (jsc#PED-16190): * Fixed a …
-
Medium max 4.8SUSE-SU-2026:4811-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow …
-
Critical max 9.4SUSE-SU-2026:4787-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
-
Critical max 9.8SUSE-SU-2026:4785-1 2 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-202…
-
Critical max 9.1openSUSE-SU-2026:12207-1 5 CVEs
vexctl-0.4.4+git106.aa6ffc8-1.1 on GA media
These are all security issues fixed in the vexctl-0.4.4+git106.aa6ffc8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12206-1 2 CVEs
trivy-0.76.0-1.1 on GA media
These are all security issues fixed in the trivy-0.76.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 5.5openSUSE-SU-2026:12205-1 1 CVE
switcheroo-2.6.0-1.1 on GA media
These are all security issues fixed in the switcheroo-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Critical max 9.1openSUSE-SU-2026:12204-1 1 CVE
python313-joserfc-1.7.7-1.1 on GA media
These are all security issues fixed in the python313-joserfc-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
UnscoredSUSE-SU-2026:24228-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59: * Fixed CVE-2026-46675 (med…
first Oct 10, 2026 -
High max 7.5SUSE-SU-2026:24222-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 9, 2026 -
Medium max 5.3SUSE-SU-2026:24221-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).
first Oct 9, 2026 -
High max 8.7SUSE-SU-2026:24220-1 9 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: Potential DoS and memory leak via TLS session use-a…
first Oct 9, 2026 -
Low max 3.5openSUSE-SU-2026:12203-1 1 CVE
libpolkit-agent-1-0-128-1.1 on GA media
These are all security issues fixed in the libpolkit-agent-1-0-128-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.5openSUSE-SU-2026:12202-1 4 CVEs
perl-Dancer2-2.2.2-1.1 on GA media
These are all security issues fixed in the perl-Dancer2-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.5openSUSE-SU-2026:12201-1 2 CVEs
perl-DBI-1.656.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.656.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.5openSUSE-SU-2026:12200-1 1 CVE
libBasicUsageEnvironment2-2026.10.17-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2026.10.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
Medium max 6.1openSUSE-SU-2026:12199-1 1 CVE
libinstpatch-1_0-2-1.1.8-1.1 on GA media
These are all security issues fixed in the libinstpatch-1_0-2-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 8.4openSUSE-SU-2026:12198-1 1 CVE
libcdio++2-2.4.0-1.1 on GA media
These are all security issues fixed in the libcdio++2-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026 -
High max 7.6openSUSE-SU-2026:12197-1 5 CVEs
aom-tools-3.15.2-1.1 on GA media
These are all security issues fixed in the aom-tools-3.15.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 20, 2026