35,661 results · Feed
-
Critical max 10.0SUSE-SU-2026:0403-1 76 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260205T172317 2026-02-05T17:23:17Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4337 CVE-2025-68121 * GO-2026-4357 CVE-2026…
first Feb 6, 2026 -
Medium max 5.9SUSE-SU-2026:0381-1 1 CVE
Security update for abseil-cpp
This update for abseil-cpp fixes the following issues: Update to 20240116.3 - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).
first Feb 4, 2026 -
High max 7.5SUSE-SU-2026:0360-1 7 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…
first Feb 2, 2026 -
High max 7.5SUSE-SU-2026:0341-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.30+7 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and J…
first Jan 29, 2026 -
Critical max 9.8SUSE-SU-2026:0315-1 395 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328). - CVE-2025-38728: smb3: fix for slab out of bounds…
first Jan 28, 2026 -
High max 7.5SUSE-SU-2026:0252-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed Denial-of-Service issue that may lead to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets (bsc#1256902)
first Jan 22, 2026 -
Medium max 6.5SUSE-SU-2026:0245-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: Security fixes: - CVE-2025-14178: heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE (bsc#1255711). Other fixes: - Add all php7 packa…
first Jan 22, 2026 -
Medium max 5.3SUSE-SU-2026:0226-1 1 CVE
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).
first Jan 22, 2026 -
UnscoredSUSE-SU-2026:0216-1 0 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Update AMD CPU ucode to 20251203 (bsc#1256483)
first Jan 22, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: …
first Jan 17, 2026 -
Medium max 5.5SUSE-SU-2026:0364-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365). - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_…
first Feb 3, 2026 -
High max 7.5SUSE-SU-2026:0332-1 4 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2…
first Jan 29, 2026 -
High max 8.2SUSE-SU-2026:0280-1 7 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD pack…
first Jan 23, 2026 -
High max 8.4SUSE-SU-2026:0273-1 1 CVE
Security update for azure-cli-core
This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fix improper neutralization of special elements used in a command which allows an unauthorized attacker to elevate privileges locally. (bsc#1239460)
first Jan 23, 2026 -
High max 8.9SUSE-SU-2026:0255-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331)
first Jan 22, 2026 -
Critical max 9.8SUSE-SU-2026:0191-1 10 CVEs
Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.173 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 20, 2026 -
Medium max 5.3SUSE-SU-2026:0099-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821).
first Jan 12, 2026 -
High max 8.8SUSE-SU-2026:0155-1 8 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242). - CVE…
first Jan 19, 2026 -
Medium max 4.3SUSE-SU-2026:0041-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 6, 2026 -
High max 7.5SUSE-SU-2026:0016-1 2 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-12765: insufficient checks in the LDAP authentication flow allow a for bypass of TLS certificate validation that can lead to the stealing of bind credentials and the altering of directory respons…
first Jan 5, 2026 -
Critical max 9.8SUSE-SU-2026:0012-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807). - CVE-2025-58142: NULL pointer dereference in the Viridian interfac…
first Jan 5, 2026 -
High max 7.0SUSE-SU-2025:4520-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed Directory Traversal and Remote Code Execution (bsc#1254313)
first Dec 24, 2025 -
High max 7.0SUSE-SU-2025:4493-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to Path Traversal and Remote Code Execution (bsc#1254313) Other fixes: - Update to 10.6.24
first Dec 19, 2025 -
High max 7.6SUSE-SU-2025:4457-1 5 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-alertmanager: - Update to version 0.28.1 (jsc#PED-13285): * Improved performance of inhibition rules when using Equal labels. * Improve the documentation on escaping in UTF-8 matchers. * Update …
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4448-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4445-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
Medium max 5.8SUSE-SU-2025:4444-1 4 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE-2025-47911: Fi…
first Dec 18, 2025 -
UnscoredSUSE-SU-2025:4426-1 4 CVEs
Security update for xkbcomp
This update for xkbcomp fixes the following issues: - CVE-2018-15863: NULL pointer dereference triggered by a a crafted keymap file with a no-op modmask expression can lead to a crash (bsc#1105832). - CVE-2018-15861: NULL pointer dereference triggered by a cr…
first Dec 17, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Dec 17, 2025 -
High max 7.8SUSE-SU-2025:4413-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-13499: Fixed Kafka dissector crash due to a malformed packet (bsc#1254108). - CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows a denial of service (bsc#1254472).
first Dec 16, 2025 -
Critical max 9.8SUSE-SU-2025:4396-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551). - MFSA 2025-94 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorr…
first Dec 15, 2025 -
Medium max 5.1SUSE-SU-2025:4319-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - The fix for CVE-2025-58436 causes a regression where GTK applications will hang. (bsc#1254353) See also https://github.com/OpenPrinting/cups/issues/1429 The fix has been temporary disabled.
first Dec 3, 2025 -
Medium max 4.3SUSE-SU-2025:4277-1 2 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to 3.13.9: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not c…
first Nov 27, 2025 -
Medium max 4.3SUSE-SU-2025:4257-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not …
first Nov 26, 2025 -
High max 8.8SUSE-SU-2025:4227-1 3 CVEs
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…
first Nov 25, 2025 -
High max 7.8SUSE-SU-2025:4224-1 5 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - CVE-2025-61662: F…
first Nov 25, 2025 -
UnscoredSUSE-SU-2025:4220-1 0 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z. (jsc#PED-11136): * GO-2023-2331 * GO-2024-2587 * GO-2025-3770 * GO-2025-4007 * GO-2025-4134 * GO-2025-4135 - Update to version 0.0.202…
first Nov 25, 2025 -
Medium max 4.0SUSE-SU-2025:4198-1 3 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374) - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373) - CVE-2025-64524: Fixed out-of-bounds w…
first Nov 24, 2025 -
Critical max 9.8SUSE-SU-2025:4149-1 196 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix n…
first Nov 20, 2025 -
Critical max 9.8SUSE-SU-2026:20473-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676:…
first Feb 19, 2026