35,560 results · Feed
-
Critical max 9.4SUSE-SU-2026:4671-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
first Oct 14, 2026 -
High max 7.5SUSE-SU-2026:4664-1 10 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…
first Oct 14, 2026 -
High max 8.5SUSE-SU-2026:4663-1 10 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
-
High max 7.5SUSE-SU-2026:4662-1 1 CVE
Security update for amazon-cloudwatch-agent
This update for amazon-cloudwatch-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594). Changes f…
-
High max 7.5SUSE-SU-2026:4661-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…
-
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-43502: net/rds: handle zero…
-
Medium max 6.3SUSE-SU-2026:4656-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynam…
-
UnscoredSUSE-SU-2026:4655-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
-
High max 7.8SUSE-SU-2026:4653-1 1 CVE
Security update for gimp
This update for gimp fixes the following issue: - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596).
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4650-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.9SUSE-SU-2026:4649-1 2 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283…
first Oct 13, 2026 -
High max 8.2SUSE-SU-2026:4648-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4647-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
Critical max 9.2SUSE-SU-2026:4659-1 3 CVEs
Security update for python312
This update for python312 fixes the following issues: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). - CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent …
-
Critical max 9.1SUSE-SU-2026:4658-1 3 CVEs
Security update for libtcnative-2-0
This update for libtcnative-2-0 fixes the following issues: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_…
-
High max 7.5SUSE-SU-2026:4657-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). …
-
Medium max 6.3SUSE-SU-2026:4654-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
first Oct 13, 2026 -
High max 7.7SUSE-SU-2026:4652-1 2 CVEs
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuratio…
first Oct 13, 2026 -
High max 7.5SUSE-SU-2026:4651-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4646-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4645-1 11 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4642-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and…
first Oct 13, 2026 -
High max 8.8SUSE-SU-2026:4641-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure …
first Oct 13, 2026 -
High max 8.9openSUSE-SU-2026:12119-1 3 CVEs
python313-urllib3_1-1.26.20-8.1 on GA media
These are all security issues fixed in the python313-urllib3_1-1.26.20-8.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Low max 3.7openSUSE-SU-2026:12118-1 1 CVE
python313-sglang-0.5.21-2.1 on GA media
These are all security issues fixed in the python313-sglang-0.5.21-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Medium max 5.9openSUSE-SU-2026:12125-1 2 CVEs
python315-3.15.0-1.1 on GA media
These are all security issues fixed in the python315-3.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.2openSUSE-SU-2026:12124-1 3 CVEs
python314-3.14.8-1.1 on GA media
These are all security issues fixed in the python314-3.14.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.2openSUSE-SU-2026:12123-1 4 CVEs
python313-3.13.16-1.1 on GA media
These are all security issues fixed in the python313-3.13.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.2openSUSE-SU-2026:12122-1 3 CVEs
python312-3.12.15-1.1 on GA media
These are all security issues fixed in the python312-3.12.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.2openSUSE-SU-2026:12121-1 3 CVEs
python311-3.11.17-1.1 on GA media
These are all security issues fixed in the python311-3.11.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Medium max 4.3openSUSE-SU-2026:12120-1 2 CVEs
python313-vllm-0.30.0-2.1 on GA media
These are all security issues fixed in the python313-vllm-0.30.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Medium max 5.3openSUSE-SU-2026:12117-1 1 CVE
python313-multidict-7.0.0-1.1 on GA media
These are all security issues fixed in the python313-multidict-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 9.6openSUSE-SU-2026:12116-1 61 CVEs
firefox-esr-153.5.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Medium max 5.3openSUSE-SU-2026:12115-1 1 CVE
fetchmail-6.6.8-1.1 on GA media
These are all security issues fixed in the fetchmail-6.6.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
High max 8.7openSUSE-SU-2026:12114-1 7 CVEs
alloy-1.20.1-1.1 on GA media
These are all security issues fixed in the alloy-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2026 -
Critical max 10.0SUSE-SU-2026:4640-1 508 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38704: rcu/nocb: Fi…
first Oct 13, 2026 -
Critical max 9.8SUSE-SU-2026:4639-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst…
first Oct 13, 2026 -
High max 8.5SUSE-SU-2026:4636-1 10 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Gr…
-
High max 7.0SUSE-SU-2026:24129-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123).
first Oct 9, 2026 -
Medium max 6.8SUSE-SU-2026:24127-1 1 CVE
Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * …
first Oct 9, 2026