35,560 results · Feed
-
High max 7.1SUSE-SU-2026:4590-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 8, 2026 -
Medium max 5.3SUSE-SU-2026:4604-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).
-
High max 7.5SUSE-SU-2026:4603-1 10 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…
-
Critical max 9.1SUSE-SU-2026:4600-1 18 CVEs
Security update for grafana, system-user-grafana
This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: * Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) CVE-2026-2303: Drop dependency on …
-
High max 7.5SUSE-SU-2026:4597-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). …
first Oct 8, 2026 -
Medium max 6.3SUSE-SU-2026:4593-1 1 CVE
Security update for python-hpack
This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).
first Oct 8, 2026 -
Medium max 4.3SUSE-SU-2026:4592-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing (bsc#1283767).
first Oct 8, 2026 -
Medium max 6.6SUSE-SU-2026:4591-1 10 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726). - CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723). - C…
first Oct 8, 2026 -
High max 7.0SUSE-SU-2026:4589-1 3 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications (bsc#1271152). - CVE-2026-59947: unsanitized URL credential handling in debug output wit…
first Oct 8, 2026 -
High max 7.1SUSE-SU-2026:4588-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 8, 2026 -
Medium max 5.1openSUSE-SU-2026:22040-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1…
first Oct 6, 2026 -
High max 7.5openSUSE-SU-2026:22039-1 1 CVE
Security update for distribution
This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762).
first Oct 6, 2026 -
High max 8.7openSUSE-SU-2026:22035-1 3 CVEs
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). - CVE-2026-84303: google.golang.org/grpc: …
first Oct 6, 2026 -
High max 8.7openSUSE-SU-2026:22034-1 10 CVEs
Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). - CVE-2026-19032: deserializer for `j…
first Oct 6, 2026 -
Critical max 9.8openSUSE-SU-2026:22032-1 19 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1269861). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can…
first Oct 6, 2026 -
High max 7.1openSUSE-SU-2026:22031-1 1 CVE
Security update for libXtst
This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).
first Oct 6, 2026 -
UnscoredopenSUSE-SU-2026:12088-1 0 CVEs
qemu-11.1.2-1.1 on GA media
These are all security issues fixed in the qemu-11.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Critical max 9.2openSUSE-SU-2026:12087-1 3 CVEs
python310-3.10.22-1.1 on GA media
These are all security issues fixed in the python310-3.10.22-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Medium max 5.3openSUSE-SU-2026:12086-1 4 CVEs
python313-Django4-4.2.30-6.1 on GA media
These are all security issues fixed in the python313-Django4-4.2.30-6.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Low max 3.3openSUSE-SU-2026:12085-1 1 CVE
onefetch-3.0.0-1.1 on GA media
These are all security issues fixed in the onefetch-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 8.6openSUSE-SU-2026:12084-1 10 CVEs
libsoup-2_4-1-2.74.3-24.1 on GA media
These are all security issues fixed in the libsoup-2_4-1-2.74.3-24.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Medium max 5.9openSUSE-SU-2026:12083-1 1 CVE
git-bug-0.11.0-2.1 on GA media
These are all security issues fixed in the git-bug-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 7.8openSUSE-SU-2026:12082-1 2 CVEs
gimp-3.2.6-4.1 on GA media
These are all security issues fixed in the gimp-3.2.6-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
High max 7.0openSUSE-SU-2026:12081-1 1 CVE
cpp15-15.3.0+git11272-2.1 on GA media
These are all security issues fixed in the cpp15-15.3.0+git11272-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Medium max 5.9openSUSE-SU-2026:12080-1 2 CVEs
bcel-6.13.0-1.1 on GA media
These are all security issues fixed in the bcel-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Low max 1.8openSUSE-SU-2026:12079-1 3 CVEs
aspell-0.60.8.2-2.1 on GA media
These are all security issues fixed in the aspell-0.60.8.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Medium max 6.2openSUSE-SU-2026:12078-1 22 CVEs
ImageMagick-7.1.2.32-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.32-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2026 -
Medium max 6.3openSUSE-SU-2026:12077-1 1 CVE
libxreaderdocument3-4.6.9-2.1 on GA media
These are all security issues fixed in the libxreaderdocument3-4.6.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Critical max 9.1openSUSE-SU-2026:12076-1 5 CVEs
traefik-3.7.13-1.1 on GA media
These are all security issues fixed in the traefik-3.7.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Low max 2.1openSUSE-SU-2026:12075-1 1 CVE
jupyter-jupyterlab-templates-0.5.3-3.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Critical max 9.8openSUSE-SU-2026:12074-1 389 CVEs
kernel-devel-7.2.9-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
High max 8.7openSUSE-SU-2026:12073-1 1 CVE
inspektor-gadget-0.57.0-1.1 on GA media
These are all security issues fixed in the inspektor-gadget-0.57.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Medium max 6.3openSUSE-SU-2026:12072-1 3 CVEs
glibc-2.44-3.1 on GA media
These are all security issues fixed in the glibc-2.44-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Medium max 4.6openSUSE-SU-2026:12071-1 2 CVEs
AusweisApp-2.6.0-1.1 on GA media
These are all security issues fixed in the AusweisApp-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2026 -
Critical max 10.0SUSE-SU-2026:24054-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24053-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24052-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24051-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24050-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026 -
Critical max 10.0SUSE-SU-2026:24049-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk-cgroup…
first Oct 6, 2026