35,661 results · Feed
-
High max 7.5SUSE-SU-2026:0343-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0342-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.2+10 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and Ja…
first Jan 29, 2026 -
Medium max 5.9SUSE-SU-2026:0338-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: - CVE-2025-0838: Fixed heap buffer overflow in sized constructors, reserve(), and rehash() methods of absl:{flat,node}hash{set,map} (bsc#1237543).
first Jan 29, 2026 -
Low max 3.7SUSE-SU-2026:0336-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).
first Jan 29, 2026 -
Medium max 5.3SUSE-SU-2026:0335-1 1 CVE
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2026-22701: Fixed TOCTOU race condition in SoftFileLock implementation of he filelock package (bsc#1256457)
first Jan 29, 2026 -
Low max 3.7SUSE-SU-2026:0334-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805)
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0333-1 4 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2…
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0331-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Jan 28, 2026 -
High max 8.8SUSE-SU-2026:0329-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747)
first Jan 28, 2026 -
High max 8.8SUSE-SU-2026:0328-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: …
first Jan 28, 2026 -
High max 8.4SUSE-SU-2026:0327-1 4 CVEs
Security update for alloy
This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion (bsc#1255333): - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/op…
first Jan 28, 2026 -
UnscoredSUSE-SU-2026:0326-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current GO security release.
first Jan 28, 2026 -
UnscoredSUSE-SU-2026:0325-1 0 CVEs
Security update for kubernetes
This update for kubernetes rebuilds it against the current GO security release.
first Jan 28, 2026 -
Medium max 4.3SUSE-SU-2026:0320-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Jan 28, 2026 -
High max 8.6SUSE-SU-2026:0307-1 1 CVE
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues: - CVE-2026-24486: Fixed non-default configuration options can lead to path traversal (bsc#1257301).
first Jan 27, 2026 -
UnscoredSUSE-SU-2026:0319-1 0 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current GO security release.
first Jan 28, 2026 -
Critical max 9.8SUSE-SU-2026:0317-1 392 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785). - CVE-2022-50700: wifi: ath10k: Delay the unmapping …
first Jan 28, 2026 -
Critical max 9.8SUSE-SU-2026:0316-1 143 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-49604,CVE-2025-40074: ip: Fix data-races around sysctl_ip_fwd_use_pmtu (bsc#1238414 bsc#1252794). - CVE-2022-50527: drm/amd…
first Jan 28, 2026 -
Medium max 6.3SUSE-SU-2026:0314-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Le…
first Jan 28, 2026 -
UnscoredSUSE-SU-2026:0305-1 0 CVEs
Recommended update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Update AMD ucode to 20251203 (bsc#1256483)
first Jan 27, 2026 -
High max 8.8SUSE-SU-2026:0304-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747)
first Jan 27, 2026 -
Critical max 9.8SUSE-SU-2026:0293-1 334 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328). - CVE-2025-38728: smb3: fix for slab out of bounds…
first Jan 26, 2026 -
Critical max 9.1SUSE-SU-2026:0292-1 16 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260123T022811 2026-01-23T02:28:11Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3764 CVE-2024-44905 GHSA-6xp3-p59p-q4fj * GO-202…
first Jan 26, 2026 -
Critical max 9.8SUSE-SU-2026:0303-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: …
first Jan 27, 2026 -
High max 7.5SUSE-SU-2026:0301-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion (bsc#1256848) - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks tha…
first Jan 27, 2026 -
Critical max 9.1SUSE-SU-2026:0296-1 18 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Update to version 1.24.12 (released 2026-01-15) (jsc#SLE-18320, bsc#1236217): Security fixes: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). - CVE-2025-5…
first Jan 26, 2026 -
Medium max 6.6SUSE-SU-2026:0291-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673).
first Jan 26, 2026 -
High max 8.2SUSE-SU-2026:0290-1 7 CVEs
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD pac…
first Jan 26, 2026 -
High max 7.5SUSE-SU-2026:0288-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Jan 26, 2026 -
Medium max 5.3SUSE-SU-2026:0287-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459).
first Jan 23, 2026 -
Low max 3.7SUSE-SU-2026:0286-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
first Jan 23, 2026 -
Critical max 9.8SUSE-SU-2026:0281-1 395 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328). - CVE-2025-38728: smb3: fix for slab out of …
first Jan 23, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476:…
first Jan 23, 2026 -
Medium max 5.5SUSE-SU-2026:0279-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278)
first Jan 23, 2026 -
Critical max 9.8SUSE-SU-2026:0278-1 395 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328). - CVE-2025-38728: smb3: fix for slab out of bou…
first Jan 23, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…
first Jan 23, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…
first Jan 23, 2026 -
Medium max 6.3SUSE-SU-2026:0268-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-13836: Fixed reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length (bsc#1254400) - CVE-2025-12084: Fixed Denial of Service due …
first Jan 23, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-578…
first Jan 23, 2026 -
UnscoredSUSE-SU-2026:0267-1 0 CVEs
Recommended update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Update AMD ucode to 20251203 (bsc#1256483)
first Jan 23, 2026