35,661 results · Feed
-
Critical max 9.8
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.38 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0260-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due to incorrect …
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0259-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0258-1 2 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0257-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418) - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399) - CVE-2025-14523: Reject duplicated Host in headers and followed upstre…
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0254-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: Security fixes: - CVE-2025-68161: Fixed absent TLS hostname verification that may allow a man-in-the-middle attack (bsc#1255427) Other fixes: - Upgrade to 2.18.0 * Added + Add support for Jakarta Mail API in t…
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0253-1 2 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 22, 2026 -
High max 8.8SUSE-SU-2026:0247-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-402…
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0246-1 10 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: ne…
first Jan 22, 2026 -
Medium max 5.1SUSE-SU-2026:0243-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.57.4 - bsc#1243867: + CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels that do not produce any non-ASCII when decoded. + RUSTSEC-2024-0404 - Unsoundness in anstream.
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0238-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4: - CVE-2025-23259: Fixed an attacker on a VM in the system can cause information disclosure and denial of service (bsc#1254161). Changelog: https://doc.dpdk.org/guides-24.11/rel_notes/…
first Jan 22, 2026 -
Medium max 5.3SUSE-SU-2026:0237-1 3 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734). - CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736). - CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0236-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header inj…
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0235-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header injection in wget (CVE-2025-60876, bsc#1253245) Other i…
first Jan 22, 2026 -
Medium max 4.5SUSE-SU-2026:0233-1 1 CVE
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458).
first Jan 22, 2026 -
High max 7.9SUSE-SU-2026:0232-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-9636: Fixed Cross-Origin Opener Policy (COOP) vulnerability (bsc#1249151).
first Jan 22, 2026 -
Low max 1.8SUSE-SU-2026:0231-1 1 CVE
Security update for exiv2-0_26
This update for exiv2-0_26 fixes the following issues: Add reference for previously fixed issue: - CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of `JpegBase::readMetadata` (bsc#1248963).
first Jan 22, 2026 -
Medium max 6.8SUSE-SU-2026:0234-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525) - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
first Jan 22, 2026 -
Medium max 6.1SUSE-SU-2026:0230-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0229-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2025-63757: Fixed integer overflow in yuv2ya16_X_c_template() (bsc#1255392).
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0228-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0227-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0225-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0224-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0223-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
first Jan 22, 2026 -
High max 7.5SUSE-SU-2026:0222-1 2 CVEs
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905). - CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPH…
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0221-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).
first Jan 22, 2026 -
Medium max 6.3SUSE-SU-2026:0220-1 2 CVEs
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation…
first Jan 22, 2026 -
Critical max 9.1SUSE-SU-2026:0219-1 6 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd…
first Jan 22, 2026 -
Critical max 9.1SUSE-SU-2026:0218-1 6 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.6 (released 2026-01-15) (bsc#1244485) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd/…
first Jan 22, 2026 -
High max 8.2SUSE-SU-2026:0217-1 1 CVE
Security update for keylime
This update for keylime fixes the following issues: - CVE-2025-13609: avoid re-registration of clients with same UUID but with different TPM identity (bsc#1254199).
first Jan 22, 2026 -
High max 7.8SUSE-SU-2026:0215-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715). - Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246). - Error out on…
first Jan 22, 2026 -
High max 7.0SUSE-SU-2026:0213-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 22, 2026 -
High max 7.0SUSE-SU-2026:0212-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 22, 2026 -
High max 8.6SUSE-SU-2026:0211-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upstream update (bsc#1254876). - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418) - CVE-2026-0719: Fixed overflow for passw…
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0210-1 6 CVEs
Security update for python3
This update for python3 fixes the following issues: Security fixes: - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-4330: Fixed extraction filter bypass for link…
first Jan 22, 2026 -
High max 8.8SUSE-SU-2026:0204-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-402…
first Jan 21, 2026 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-396…
first Jan 21, 2026 -
High max 8.8SUSE-SU-2026:0200-1 5 CVEs
Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50367: fs: fix…
first Jan 21, 2026 -
Medium max 6.3SUSE-SU-2026:0199-1 1 CVE
Security update for python-FontTools
This update for python-FontTools fixes the following issues: - CVE-2025-66034: Fixed arbitrary file write vulnerability that could lead to remote code execution (bsc#1254366).
first Jan 21, 2026