35,661 results · Feed
-
High max 8.4SUSE-SU-2026:0434-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: Security fixes: - CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396) - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'F…
first Feb 11, 2026 -
Critical max 9.1SUSE-SU-2026:0433-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2025-68670: Fix a potential overflow when processing user domain information. (bsc#1257362)
first Feb 11, 2026 -
High max 8.6SUSE-SU-2026:0431-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection. (bsc#1257440) - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read…
first Feb 11, 2026 -
Medium max 6.9SUSE-SU-2026:0432-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to v3.51.2: - CVE-2025-7709: Fixed an integer overflow in the FTS5 extension. (bsc#1254670)
first Feb 11, 2026 -
Critical max 9.1SUSE-SU-2026:0427-1 2 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clon…
first Feb 11, 2026 -
Critical max 9.1SUSE-SU-2026:0426-1 3 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clo…
first Feb 11, 2026 -
High max 7.1SUSE-SU-2026:0425-1 1 CVE
Security update for python313-wheel
This update for python313-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 11, 2026 -
High max 7.1SUSE-SU-2026:0424-1 1 CVE
Security update for python-wheel
This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).
first Feb 11, 2026 -
UnscoredSUSE-SU-2026:0423-1 0 CVEs
Security update for python-brotlipy
This update for python-brotlipy fixes the following issues: - Add max length decompression (bsc#1254867, bsc#1256017)
first Feb 11, 2026 -
Medium max 6.5SUSE-SU-2026:0422-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498). - CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lea…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0415-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Feb 10, 2026 -
High max 7.5SUSE-SU-2026:0414-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.30+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Feb 10, 2026 -
Medium max 5.9SUSE-SU-2026:0412-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to 20240116.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 10, 2026 -
Critical max 9.1SUSE-SU-2026:0404-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2025-68670: Fix a potential overflow when processing user domain information. (bsc#1257362)
first Feb 6, 2026 -
Medium max 4.3SUSE-SU-2026:0388-1 1 CVE
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 (bsc#1257397): - CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
first Feb 5, 2026 -
Medium max 6.9SUSE-SU-2026:0386-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144) - CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)
first Feb 5, 2026 -
High max 7.8SUSE-SU-2026:0385-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768). - CVE-2022-49545: ALSA: usb-audio: Cancel pen…
first Feb 4, 2026 -
High max 8.1SUSE-SU-2026:0384-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962). - CVE-2026-23952: pr…
first Feb 4, 2026 -
Medium max 5.3SUSE-SU-2026:0383-1 2 CVEs
Security update for rekor
This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishme…
first Feb 4, 2026 -
Medium max 6.5SUSE-SU-2026:0377-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: Fixed heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735)
first Feb 4, 2026 -
High max 7.5SUSE-SU-2026:0382-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034) - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036) - CVE-2026-21933: Fixed Oracle Java SE …
first Feb 4, 2026 -
Medium max 6.9SUSE-SU-2026:0379-1 1 CVE
Security update for cockpit-podman
This update for cockpit-podman fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324)
first Feb 4, 2026 -
High max 7.8SUSE-SU-2026:0378-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: Fixed possile memory corruption in the armor parser [T7906] (bsc#1255715) - Fixed GnuPG Accepting Path Separators and Path Traversals in Literal Data (bsc#1256389) - Fixed Cleartext Signature …
first Feb 4, 2026 -
Medium max 5.5SUSE-SU-2026:0375-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Feb 4, 2026 -
High max 8.2SUSE-SU-2026:0374-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).
first Feb 4, 2026 -
Medium max 5.4SUSE-SU-2026:0373-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 4, 2026 -
Medium max 5.4SUSE-SU-2026:0372-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Feb 4, 2026 -
Critical max 9.8SUSE-SU-2026:0369-1 68 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdev_device_add() (bsc#1249739). - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_ha…
first Feb 3, 2026 -
High max 7.8SUSE-SU-2026:0354-1 5 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260128T190828 2026-01-28T19:08:28Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4338 CVE-2025-68119 CVE-2025-68119 * GO-2026-433…
first Jan 30, 2026 -
Medium max 6.8SUSE-SU-2026:0351-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following (bsc#1257116)
first Jan 30, 2026 -
Critical max 9.8SUSE-SU-2026:0368-1 2 CVEs
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_vali…
first Feb 3, 2026 -
High max 8.9SUSE-SU-2026:0367-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …
first Feb 3, 2026 -
High max 7.5SUSE-SU-2026:0363-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.10+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Feb 3, 2026 -
High max 7.5SUSE-SU-2026:0359-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0358-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0356-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-11234: Fixed use-after-free in websocket handshake code can lead to denial of service (bsc#1250984).
first Feb 1, 2026 -
Medium max 5.4SUSE-SU-2026:0355-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…
first Jan 31, 2026 -
High max 7.8SUSE-SU-2026:0352-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54168: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (bsc#1256053). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unreg…
first Jan 30, 2026 -
High max 8.2SUSE-SU-2026:0344-1 1 CVE
Security update for assertj-core
This update for assertj-core fixes the following issues: Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion (bsc#1257293).
first Jan 29, 2026 -
Critical max 9.8SUSE-SU-2026:0350-1 68 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdev_device_add() (bsc#1249739). - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb…
first Jan 30, 2026