35,560 results · Feed
-
UnscoredSUSE-SU-2026:4747-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Oct 19, 2026 -
Critical max 9.6openSUSE-SU-2026:12188-1 10 CVEs
chromedriver-155.0.8059.84-1.1 on GA media
These are all security issues fixed in the chromedriver-155.0.8059.84-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 19, 2026 -
Medium max 5.3openSUSE-SU-2026:12187-1 2 CVEs
ImageMagick-7.1.2.34-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.34-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 19, 2026 -
High max 8.8SUSE-SU-2026:4732-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4730-1 4 CVEs
Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4718-1 4 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 18, 2026 -
Critical max 9.8SUSE-SU-2026:24184-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:4725-1 4 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM…
first Oct 18, 2026 -
UnscoredSUSE-SU-2026:4715-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Oct 17, 2026 -
Critical max 10.0SUSE-SU-2026:4714-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…
first Oct 16, 2026 -
Medium max 6.8SUSE-SU-2026:24189-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
High max 8.2SUSE-SU-2026:24188-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
Critical max 10.0SUSE-SU-2026:24182-1 479 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38…
first Oct 12, 2026 -
Critical max 10.0SUSE-SU-2026:24181-1 473 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38704…
first Oct 12, 2026 -
Critical max 9.8SUSE-SU-2026:24179-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026 -
Critical max 9.2SUSE-SU-2026:24178-1 5 CVEs
Security update for iperf
This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). - CVE-2026-71218: unbounded peer-controlled allocation…
first Oct 12, 2026 -
High max 8.4SUSE-SU-2026:4744-1 11 CVEs
Security update for python3, python3-base, python3-doc
This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-…
first Oct 19, 2026 -
High max 8.4SUSE-SU-2026:4743-1 16 CVEs
Security update for python36
This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1274743). - CVE-2026-3219: pip doesn'…
first Oct 19, 2026 -
UnscoredSUSE-SU-2026:4740-1 0 CVEs
Security update for kubernetes
This update for kubernetes rebuilds it against the current go security release.
first Oct 19, 2026 -
High max 8.6SUSE-SU-2026:4739-1 15 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of serv…
first Oct 19, 2026 -
High max 8.4SUSE-SU-2026:4738-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).
first Oct 19, 2026 -
Critical max 9.6SUSE-SU-2026:4736-1 86 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 (MFSA 2026-110, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation iss…
first Oct 19, 2026 -
Medium max 4.4SUSE-SU-2026:4735-1 2 CVEs
Security update for alsa
This update for alsa fixes the following issues: - CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in `src/topology/ctl.c` allows for integer overflow that can cause sensitive data leak and application crashes (bsc#128256…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4734-1 4 CVEs
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 19, 2026 -
Critical max 9.8SUSE-SU-2026:4733-1 4 CVEs
Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…
first Oct 19, 2026 -
High max 7.8openSUSE-SU-2026:22123-1 6 CVEs
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473) - CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474) - CVE-2026-106063: plug-ins: Add bounds ch…
first Oct 16, 2026 -
Medium max 5.9openSUSE-SU-2026:22122-1 1 CVE
Security update for psqlODBC
This update for psqlODBC fixes the following issues: Changes in psqlODBC: Update to 18.00.0005: * https://odbc.postgresql.org/docs/release.html * Fix heap memory corruption when an application binds more than 32767 parameters on a single statement. SQLBindPar…
first Oct 16, 2026 -
High max 8.2openSUSE-SU-2026:22120-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issues: Changes in cups-filters: - No longer provide the serial backend with 0700 permissions so cupsd does no longer run it as root but as usual as user 'lp' to avoid CVE-2026-95511 "Root arbitrary file overwr…
first Oct 15, 2026 -
High max 7.5openSUSE-SU-2026:22117-1 1 CVE
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.6: * workflows: mirror release tags to lib/ module tags * fs/zfs: fall back to VFS when zfs stats are unavailable * storage/stdout: nil-check Cpu, Network, and Memory s…
first Oct 14, 2026 -
Medium max 5.9openSUSE-SU-2026:22109-1 2 CVEs
Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399).…
first Oct 16, 2026 -
High max 7.5openSUSE-SU-2026:22116-1 2 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.1: * bumped go version to v1.26.7 (backport #771) * https registry auth fix (backport #763) * adjust supporting artifact retrieval (backport #777) * reject --platform on dig…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22111-1 11 CVEs
Security update for pi-coding-agent
This update for pi-coding-agent fixes the following issues: Changes in pi-coding-agent: - Update to version 1.0.4 (1.0.3 was superseded the same day and never submitted): * BREAKING: provider azure-openai-responses renamed to azure, now also serving Azure Fou…
first Oct 9, 2026 -
High max 7.8openSUSE-SU-2026:22106-1 80 CVEs
Security update for nvidia-open-driver-G07-signed
This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 (bsc#1283265) - fix build against Linux 7.3.0 (RC) (bsc#1278022) - re-disabled CXL support for now aga…
first Oct 15, 2026 -
Medium max 6.2openSUSE-SU-2026:22105-1 2 CVEs
Security update for p11-kit
This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attri…
first Oct 15, 2026 -
Medium max 6.8openSUSE-SU-2026:22103-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 14, 2026 -
High max 8.2openSUSE-SU-2026:22102-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). - CVE-2026-54872: Timi…
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:22101-1 1 CVE
Security update for perl-XS-Parse-Keyword
This update for perl-XS-Parse-Keyword fixes the following issue: - CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247).
first Oct 14, 2026 -
High max 7.7openSUSE-SU-2026:22100-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 14, 2026 -
Low max 2.5openSUSE-SU-2026:22099-1 1 CVE
Security update for mutt
This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).
first Oct 14, 2026 -
Critical max 9.8openSUSE-SU-2026:22091-1 401 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid…
first Oct 12, 2026