35,560 results · Feed
-
High max 7.8SUSE-SU-2026:23893-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 23, 2026 -
High max 8.7SUSE-SU-2026:23892-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 23, 2026 -
High max 8.2SUSE-SU-2026:23891-1 7 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 23, 2026 -
Critical max 10.0SUSE-SU-2026:23887-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
High max 8.9SUSE-SU-2026:23886-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:23885-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Sep 22, 2026 -
High max 7.9SUSE-SU-2026:23884-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
Critical max 10.0SUSE-SU-2026:23881-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
High max 8.2SUSE-SU-2026:4396-1 5 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.…
first Sep 29, 2026 -
High max 8.4SUSE-SU-2026:4398-1 3 CVEs
Security update for python-pymongo
This update for python-pymongo fixes the following issues: - CVE-2026-96747: improper handling of key management endpoint values ending in `.sock` allows users with write access to the encryption key metadata to open connections to local sockets on the applic…
first Sep 29, 2026 -
High max 8.9SUSE-SU-2026:4397-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 29, 2026 -
High max 8.9SUSE-SU-2026:4395-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4394-1 12 CVEs
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead t…
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:4393-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4392-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass a…
first Sep 29, 2026 -
Critical max 9.1SUSE-SU-2026:4391-1 30 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler (bsc#1275501). - CVE-2026-59903: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header O…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4389-1 3 CVEs
Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc…
first Sep 29, 2026 -
High max 8.7SUSE-SU-2026:4388-1 3 CVEs
Security update for amazon-cloudwatch-agent
This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279334). …
first Sep 29, 2026 -
High max 7.5SUSE-SU-2026:4387-1 1 CVE
Security update for corosync
This update for corosync fixes the following issue: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738).
first Sep 29, 2026 -
High max 8.8openSUSE-SU-2026:11913-1 2 CVEs
xdg-dbus-proxy-0.1.9-1.1 on GA media
These are all security issues fixed in the xdg-dbus-proxy-0.1.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 8.1openSUSE-SU-2026:11912-1 19 CVEs
libwireshark19-4.6.9-1.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.0openSUSE-SU-2026:11910-1 1 CVE
libvlc5-3.0.24-1.1 on GA media
These are all security issues fixed in the libvlc5-3.0.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Low max 3.7openSUSE-SU-2026:11903-1 1 CVE
python313-django-allauth-65.19.4-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.5openSUSE-SU-2026:11902-1 1 CVE
python313-Flask-3.1.3-3.1 on GA media
These are all security issues fixed in the python313-Flask-3.1.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11898-1 3 CVEs
libtcnative-1-0-1.3.9-1.1 on GA media
These are all security issues fixed in the libtcnative-1-0-1.3.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.1openSUSE-SU-2026:11897-1 1 CVE
libXtst-devel-1.2.5-2.1 on GA media
These are all security issues fixed in the libXtst-devel-1.2.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 5.5openSUSE-SU-2026:11896-1 1 CVE
libXpm-devel-3.5.18-3.1 on GA media
These are all security issues fixed in the libXpm-devel-3.5.18-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11893-1 302 CVEs
kernel-devel-7.2.8-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11889-1 1 CVE
emacs-31.1-4.1 on GA media
These are all security issues fixed in the emacs-31.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4383-1 4 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 28, 2026 -
Medium max 5.3SUSE-SU-2026:4367-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:4366-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:23747-1 5 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:23726-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026 -
High max 7.8SUSE-SU-2026:23724-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:23711-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23710-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Medium max 6.8SUSE-SU-2026:23707-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
High max 7.1SUSE-SU-2026:23705-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 11, 2026