35,560 results · Feed
-
High max 8.7SUSE-SU-2026:24150-1 3 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). - CVE-2026-84303: google.golang.org/grpc: …
first Oct 6, 2026 -
High max 8.7SUSE-SU-2026:24149-1 10 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). - CVE-2026-19032: deserializer for `j…
first Oct 6, 2026 -
Critical max 9.8SUSE-SU-2026:24148-1 19 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1269861). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can…
first Oct 6, 2026 -
High max 7.1SUSE-SU-2026:24145-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 6, 2026 -
High max 7.1SUSE-SU-2026:24144-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 5, 2026 -
UnscoredSUSE-SU-2026:24142-1 0 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20261001T202415 2026-10-01T20:24:15Z (jsc#PED-11136): * GO-2024-2584 GHSA-86h5-xcpx-cfqc * GO-2026-5544 GHSA-pjv4-3c63-699f * GO-2026-6480 GHSA-2g8v-grq3-hq2g * GO-2026-6481 …
first Oct 5, 2026 -
Medium max 4.8SUSE-SU-2026:4686-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow …
first Oct 15, 2026 -
Low max 2.5SUSE-SU-2026:4685-1 1 CVE
Security update for mutt
This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).
first Oct 15, 2026 -
Critical max 10.0SUSE-SU-2026:4687-1 229 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2026-31663: xfrm: hold device only for …
first Oct 15, 2026 -
Critical max 9.2SUSE-SU-2026:4678-1 5 CVEs
Security update for iperf
This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). - CVE-2026-71218: unbounded peer-controlled allocation…
-
High max 7.4SUSE-SU-2026:4677-1 3 CVEs
Security update for the Java stack
This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant (Updated to version 1.10.18): - Security issues fixed: - CVE-2021-36374: F…
-
Critical max 9.8openSUSE-SU-2026:12138-1 5 CVEs
xen-4.22.0_06-1.1 on GA media
These are all security issues fixed in the xen-4.22.0_06-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 4.3openSUSE-SU-2026:12137-1 1 CVE
python-Twisted-doc-26.4.0-4.1 on GA media
These are all security issues fixed in the python-Twisted-doc-26.4.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
UnscoredopenSUSE-SU-2026:12136-1 0 CVEs
python-M2Crypto-doc-0.50.0-2.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.50.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 5.9openSUSE-SU-2026:12135-1 1 CVE
psqlODBC-18.00.0005-1.1 on GA media
These are all security issues fixed in the psqlODBC-18.00.0005-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 6.9openSUSE-SU-2026:12134-1 1 CVE
corepack24-24.21.0-1.1 on GA media
These are all security issues fixed in the corepack24-24.21.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 6.9openSUSE-SU-2026:12133-1 1 CVE
matrix-synapse-1.163.0-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.163.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 5.9openSUSE-SU-2026:12132-1 2 CVEs
libsoup-2_4-1-2.74.3-25.1 on GA media
These are all security issues fixed in the libsoup-2_4-1-2.74.3-25.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Critical max 9.8openSUSE-SU-2026:12131-1 220 CVEs
kernel-devel-7.2.10-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Critical max 9.0openSUSE-SU-2026:12130-1 1 CVE
jfrog-cli-2.127.0-1.1 on GA media
These are all security issues fixed in the jfrog-cli-2.127.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
High max 7.5openSUSE-SU-2026:12129-1 1 CVE
helm-4.3.0-5.1 on GA media
These are all security issues fixed in the helm-4.3.0-5.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
High max 7.8openSUSE-SU-2026:12128-1 2 CVEs
ghostscript-10.08.0-2.1 on GA media
These are all security issues fixed in the ghostscript-10.08.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 6.9openSUSE-SU-2026:12127-1 1 CVE
elemental3-3.0.4-1.1 on GA media
These are all security issues fixed in the elemental3-3.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 5.9openSUSE-SU-2026:12126-1 1 CVE
aspell-0.60.8.2-3.1 on GA media
These are all security issues fixed in the aspell-0.60.8.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2026 -
Medium max 4.8SUSE-SU-2026:24140-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing…
first Oct 12, 2026 -
Medium max 6.8SUSE-SU-2026:24139-1 2 CVEs
Security update for python-oauthlib
This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…
first Oct 12, 2026 -
Medium max 6.3SUSE-SU-2026:24138-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination…
first Oct 10, 2026 -
High max 7.5SUSE-SU-2026:24137-1 6 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026…
first Oct 10, 2026 -
High max 8.2SUSE-SU-2026:24133-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…
first Oct 9, 2026 -
High max 7.1SUSE-SU-2026:24132-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). - Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd
first Oct 9, 2026 -
Critical max 9.6SUSE-SU-2026:24136-1 6 CVEs
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
first Oct 10, 2026 -
Critical max 9.1SUSE-SU-2026:24135-1 10 CVEs
Security update for unbound
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…
first Oct 9, 2026 -
Critical max 9.1SUSE-SU-2026:24134-1 9 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
first Oct 9, 2026 -
High max 7.5SUSE-SU-2026:24131-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
first Oct 9, 2026 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…
first Oct 14, 2026 -
UnscoredSUSE-SU-2026:4674-1 0 CVEs
Security update for helm
This update for helm rebuilds it against the current go security release.
first Oct 14, 2026 -
Medium max 6.3SUSE-SU-2026:4669-1 1 CVE
Security update for glibc
This update for glibc fixes the following issue: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
first Oct 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2024-56644: net/ipv6: release expired e…
first Oct 14, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: crypto: af_alg - Disallo…
first Oct 14, 2026 -
UnscoredSUSE-SU-2026:4675-1 0 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current go security release.
first Oct 14, 2026