35,661 results · Feed
-
High max 7.5SUSE-SU-2026:0198-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545). - CVE-2025-63757: Fixed integer overflow in yuv2ya16_X_c_template() (bsc#1255392).
first Jan 21, 2026 -
Medium max 5.9SUSE-SU-2026:0197-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Jan 21, 2026 -
High max 8.3SUSE-SU-2026:0196-1 5 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45231: Fixed out of bounds read when handling a ND Redirect message with truncated options (bsc#1218881). - CVE-2023-45232: Fixed infinite loop when parsing unknown options in the Destination Options…
first Jan 21, 2026 -
Critical max 9.8SUSE-SU-2026:0194-1 1 CVE
Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
first Jan 21, 2026 -
Medium max 6.1SUSE-SU-2026:0192-1 1 CVE
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525)
first Jan 21, 2026 -
Critical max 9.8SUSE-SU-2026:0188-1 5 CVEs
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50490: b…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2026:0187-1 7 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: n…
first Jan 20, 2026 -
High max 8.8SUSE-SU-2026:0185-1 4 CVEs
Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50490: b…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2026:0186-1 9 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.116 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: n…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2026:0180-1 9 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: ne…
first Jan 20, 2026 -
High max 8.8SUSE-SU-2026:0154-1 9 CVEs
Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242). - CVE…
first Jan 19, 2026 -
Critical max 9.8SUSE-SU-2026:0153-1 13 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: MFSA 2026-05 (bsc#1256340): - CVE-2026-0877: Mitigation bypass in the DOM in Security component - CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphics in CanvasWebGL …
first Jan 19, 2026 -
High max 8.6SUSE-SU-2026:0151-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers and followed upsteram update (bsc#1254876). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399)
first Jan 19, 2026 -
High max 8.8SUSE-SU-2026:0147-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6_4_0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-4020…
first Jan 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476…
first Jan 17, 2026 -
Critical max 10.0SUSE-SU-2026:0142-1 31 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454 * GO-2…
first Jan 17, 2026 -
Medium max 6.3SUSE-SU-2026:0130-1 3 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docu…
first Jan 15, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3968…
first Jan 17, 2026 -
Medium max 6.5SUSE-SU-2026:0143-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498). - CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lea…
first Jan 17, 2026 -
Medium max 6.3SUSE-SU-2026:0133-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-8291: check validity of the ZIP64 End of Central Directory (EOCD) in the 'zipfile' module (bsc#1251305). - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-…
first Jan 16, 2026 -
Medium max 5.3SUSE-SU-2026:0125-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
first Jan 14, 2026 -
Critical max 9.8SUSE-SU-2026:0122-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due to incorrect …
first Jan 14, 2026 -
Medium max 6.3SUSE-SU-2026:0119-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105)
first Jan 13, 2026 -
UnscoredSUSE-SU-2026:0107-1 1 CVE
Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes one security issue The following security issue was fixed: - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251984).
first Jan 12, 2026 -
High max 7.3SUSE-SU-2026:0090-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251984). - CVE-2025-38257: s390/p…
first Jan 12, 2026 -
High max 7.8SUSE-SU-2026:0083-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-15059: Fixed Heap-based Buffer Overflow Remote Code Execution Vulnerability in GIMP PSP File Parsing (bsc#1255766).
first Jan 9, 2026 -
Medium max 6.3SUSE-SU-2026:0082-1 1 CVE
Security update for python-filelock
This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244).
first Jan 9, 2026 -
Medium max 5.5SUSE-SU-2026:0068-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML (bsc#1253278)
first Jan 8, 2026 -
Medium max 5.5SUSE-SU-2026:0080-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Jan 9, 2026 -
Medium max 5.5SUSE-SU-2026:0079-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278) Other…
first Jan 9, 2026 -
Medium max 6.3SUSE-SU-2026:0078-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).
first Jan 9, 2026 -
Medium max 5.3SUSE-SU-2026:0050-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 7, 2026 -
Medium max 5.3SUSE-SU-2026:0067-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
first Jan 8, 2026 -
Medium max 5.3SUSE-SU-2026:0066-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: Fixed bearer token leak on cross-protocol redirect (bsc#1255731) - CVE-2025-15079: Fixed unknown host connection acceptance when set in the global knownhostsfile (bsc#1255733) - CVE-2025-14819…
first Jan 8, 2026 -
Low max 1.9SUSE-SU-2026:0062-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 8, 2026 -
Low max 1.9SUSE-SU-2026:0053-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 7, 2026 -
Medium max 5.3SUSE-SU-2026:0051-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 7, 2026 -
Low max 1.9SUSE-SU-2026:0036-1 1 CVE
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).
first Jan 6, 2026 -
Medium max 6.3SUSE-SU-2026:0025-1 3 CVEs
Security update for python312
This update for python312 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docu…
first Jan 5, 2026 -
Medium max 5.7SUSE-SU-2026:0042-1 1 CVE
Security update for usbmuxd
This update for usbmuxd fixes the following issues: - CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)
first Jan 6, 2026