35,560 results · Feed
-
Medium max 6.3SUSE-SU-2026:23990-1 2 CVEs
Security update for distribution
This update for distribution fixes the following issues: - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). - CVE-2026-81872: …
first Oct 1, 2026 -
UnscoredSUSE-SU-2026:23989-1 0 CVEs
Security update for jline3
This update for jline3 fixes the following issue: Update to upstream version 3.30.17: * Security Fixes + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) + Authenticated SSH Shell Channel Resource Leak via…
first Oct 1, 2026 -
High max 7.1SUSE-SU-2026:23986-1 1 CVE
Security update for valkey
This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 30, 2026 -
High max 8.4SUSE-SU-2026:23984-1 18 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…
first Sep 30, 2026 -
High max 8.7SUSE-SU-2026:23983-1 19 CVEs
Security update for sccache
This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavi…
first Sep 30, 2026 -
Critical max 9.8SUSE-SU-2026:23981-1 62 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditi…
first Sep 30, 2026 -
Medium max 5.3SUSE-SU-2026:23980-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 30, 2026 -
Medium max 5.1SUSE-SU-2026:23975-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Oct 1, 2026 -
High max 8.4SUSE-SU-2026:23973-1 18 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…
first Sep 30, 2026 -
Medium max 5.3SUSE-SU-2026:23971-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 30, 2026 -
Medium max 6.8SUSE-SU-2026:4515-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving (bsc#1275777). - CVE-2026-61308: enhance HTTP connections (bsc#1275778). - CVE-2026-70907: enhance TLS server (bsc#1275764). Changes for java-11-openjdk: …
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:4514-1 8 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - C…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:4513-1 16 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…
first Oct 5, 2026 -
Critical max 9.8SUSE-SU-2026:4507-1 13 CVEs
Security update for the Linux Kernel (Live Patch 53 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.214 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…
first Oct 5, 2026 -
High max 7.5SUSE-SU-2026:4502-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 5, 2026 -
High max 7.5SUSE-SU-2026:4501-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 5, 2026 -
High max 7.5SUSE-SU-2026:4500-1 4 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:4498-1 18 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: …
first Oct 5, 2026 -
Critical max 9.8SUSE-SU-2026:4497-1 7 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). …
first Oct 5, 2026 -
High max 7.1SUSE-SU-2026:4494-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). - Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd
first Oct 5, 2026 -
High max 7.1SUSE-SU-2026:4493-1 1 CVE
Security update for valkey
This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Oct 5, 2026 -
High max 7.1SUSE-SU-2026:4492-1 2 CVEs
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
first Oct 5, 2026 -
High max 7.1SUSE-SU-2026:4491-1 1 CVE
Security update for valkey
This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:4489-1 19 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
first Oct 5, 2026 -
Critical max 10.0SUSE-SU-2026:4471-1 19 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…
-
Medium max 5.5SUSE-SU-2026:4457-1 1 CVE
Security update for rpm
This update for rpm fixes the following issue: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584). Other updates and bugfixes: - Fix `libelf` handl…
-
Medium max 6.4SUSE-SU-2026:4456-1 2 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925). - CVE-2026-12610: cancelled or…
-
Medium max 4.3SUSE-SU-2026:4447-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116).
-
High max 7.5SUSE-SU-2026:4443-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).
-
High max 7.5SUSE-SU-2026:4442-1 2 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKey…
-
High max 8.2SUSE-SU-2026:4458-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
-
High max 7.5SUSE-SU-2026:4446-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
-
Medium max 5.1SUSE-SU-2026:4445-1 1 CVE
Security update for rubygem-rails-html-sanitizer
This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275199).
-
High max 8.7SUSE-SU-2026:4444-1 4 CVEs
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc…
-
UnscoredSUSE-SU-2026:4441-1 0 CVEs
Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues: - Package the persistent-reservation helper's entrypoint script (bsc#1276520): virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place …
-
Critical max 9.8SUSE-SU-2026:4440-1 7 CVEs
Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…
first Oct 4, 2026 -
UnscoredSUSE-SU-2026:3961-2 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC…
first Oct 4, 2026 -
High max 7.5openSUSE-SU-2026:12046-1 1 CVE
python313-validators-0.35.0-1.4 on GA media
These are all security issues fixed in the python313-validators-0.35.0-1.4 package on the GA media of openSUSE Tumbleweed.
first Oct 4, 2026 -
High max 7.5openSUSE-SU-2026:12038-1 5 CVEs
python313-requests-2.34.2-1.2 on GA media
These are all security issues fixed in the python313-requests-2.34.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Oct 4, 2026 -
Critical max 9.8openSUSE-SU-2026:12037-1 1 CVE
python313-reportlab-4.5.1-1.2 on GA media
These are all security issues fixed in the python313-reportlab-4.5.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Oct 4, 2026