35,560 results · Feed
-
High max 8.8SUSE-SU-2026:24211-1 1 CVE
Security update for pgvector
This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to versio…
first Oct 9, 2026 -
Critical max 9.3SUSE-SU-2026:24208-1 2 CVEs
Security update for python-anyio
This update for python-anyio fixes the following issues: - CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr…
first Oct 8, 2026 -
Low max 3.7SUSE-SU-2026:24205-1 2 CVEs
Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). - Caller-configured sec…
first Oct 8, 2026 -
High max 7.4SUSE-SU-2026:24203-1 7 CVEs
Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: out-o…
first Oct 8, 2026 -
Medium max 6.5SUSE-SU-2026:24201-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration p…
first Oct 8, 2026 -
High max 7.5SUSE-SU-2026:24199-1 11 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Oct 8, 2026 -
Critical max 9.8SUSE-SU-2026:24197-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
High max 8.6SUSE-SU-2026:24196-1 1 CVE
Security update for pacemaker
This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make…
first Oct 9, 2026 -
Critical max 9.5SUSE-SU-2026:24195-1 7 CVEs
Security update for hawk2
This update for hawk2 fixes the following issues: - CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). - CVE-2026-66066: unsafe image processing operations on untrusted uploads can …
first Oct 9, 2026 -
High max 7.8SUSE-SU-2026:24194-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
Medium max 6.2SUSE-SU-2026:24193-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
Critical max 9.8SUSE-SU-2026:4776-1 2 CVEs
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-6815…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4773-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4772-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 20, 2026 -
Critical max 9.8SUSE-SU-2026:4768-1 4 CVEs
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 20, 2026 -
Medium max 6.1SUSE-SU-2026:4765-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917).
first Oct 20, 2026 -
UnscoredSUSE-SU-2026:4764-1 0 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: - Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). - Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). - Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). - …
first Oct 20, 2026 -
Medium max 5.5SUSE-SU-2026:4763-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4762-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). Changes for openssl-1_0_0: - Security fixes in August 2026 release (bsc#1274774)
first Oct 20, 2026 -
Medium max 5.5SUSE-SU-2026:4761-1 1 CVE
Security update for libXpm
This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
first Oct 20, 2026 -
High max 7.5SUSE-SU-2026:4760-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 20, 2026 -
High max 8.7SUSE-SU-2026:4754-1 26 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may b…
first Oct 20, 2026 -
Medium max 6.2SUSE-SU-2026:4753-1 24 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause…
first Oct 20, 2026 -
UnscoredSUSE-SU-2026:4750-1 0 CVEs
Security update for rekor
This update for rekor rebuilds it against the current go security release.
first Oct 20, 2026 -
Critical max 9.8SUSE-SU-2026:4749-1 4 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 20, 2026 -
UnscoredSUSE-SU-2026:3547-2 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC…
first Oct 20, 2026 -
Medium max 6.5openSUSE-SU-2026:22130-1 3 CVEs
Security update for grok-build
This update for grok-build fixes the following issues: Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure (boo#1285155) - CVE-2026-109350: gix-pack ofs-delta base-distance handling flaw (boo#1285155) - CVE-2026-109351: …
first Oct 19, 2026 -
Medium max 6.5openSUSE-SU-2026:22128-1 2 CVEs
Security update for libxls
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix us…
first Oct 19, 2026 -
Low max 3.7openSUSE-SU-2026:22127-1 3 CVEs
Security update for putty
This update for putty fixes the following issues: Changes in putty: - Update to release 0.85 * Fixed a remotely triggerable use-after-free in Pageant. * Fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. (Onl…
first Oct 19, 2026 -
Medium max 5.4openSUSE-SU-2026:22126-1 1 CVE
Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: Update to version 0.60.0: * BREAKING: remove the full-screen progress mode: the --progress and --progress-keep-open flags and the prodash-render-tui feature are gone, line progress stay…
first Oct 19, 2026 -
Critical max 9.1openSUSE-SU-2026:22125-1 17 CVEs
Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: Update to version 12.4.10: * Security: * CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Drop dependency on…
first Oct 19, 2026 -
High max 7.8openSUSE-SU-2026:22138-1 3 CVEs
Security update for hashcat
This update for hashcat fixes the following issues: Changes in hashcat: Update to snapshot v7.1.2-942-gef3508ed8: * Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2026-68766 [boo#1276254] * Feed plugins and attack-mode 8 * Probabili…
first Oct 19, 2026 -
Critical max 9.1openSUSE-SU-2026:22136-1 1 CVE
Security update for python-joserfc
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array (bsc#1285840)
first Oct 19, 2026 -
High max 8.7openSUSE-SU-2026:22135-1 1 CVE
Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: * CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame fragmentation in the gRPC transport (boo#1279216) * Done throu…
first Oct 19, 2026 -
High max 8.7openSUSE-SU-2026:22134-1 8 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.102.0, fixing four security issues (GHSA-39wj-f2f4-978v, GHSA-4mq3-hpgx-9cx8, GHSA-qcwj-mr2r-2cx7, GHSA-wjmr-j3rp-mh2g): * gh release/run/attestation download and repo read-fi…
first Oct 19, 2026 -
Critical max 9.1openSUSE-SU-2026:22133-1 3 CVEs
Security update for tinyproxy
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387] - Fixed failure to reject requests containing multiple Content-Length heade…
first Oct 19, 2026 -
High max 7.5openSUSE-SU-2026:22131-1 2 CVEs
Security update for varnish
This update for varnish fixes the following issues: Changes in varnish: - update to 7.7.3 (bsc#1280114, CVE-2025-8671): * https://vinyl-cache.org/docs/7.7/whats-new/changes-7.7.html * https://vinyl-cache.org/security/VSV00017.html#vsv00017 - Update to release…
first Oct 19, 2026 -
High max 7.5openSUSE-RU-2026:22137-1 1 CVE
Recommended update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - CVE-2026-78669, bsc#1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes
first Oct 19, 2026 -
High max 7.5openSUSE-RU-2026:22132-1 4 CVEs
Recommended update for sequoia-sq
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: * tool: Release v1.5.0. * tool: Fix link to README. * tool: Set a version for the sqz dependency. * Enable optimizations…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4748-1 4 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…