35,560 results · Feed
-
Low max 3.8SUSE-SU-2026:23697-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
Critical max 9.8SUSE-SU-2026:23691-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23685-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23683-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23682-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23680-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23679-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23678-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23676-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 12, 2026 -
High max 7.8SUSE-SU-2026:23675-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23674-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
first Sep 12, 2026 -
Medium max 6.2SUSE-SU-2026:23660-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
Medium max 4.8SUSE-SU-2026:23627-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Critical max 10.0SUSE-SU-2026:23625-1 181 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260827T195228 2026-08-27T19:52:28Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5026 CVE-2026-39821 * GO-2026-6225 * GO-2026-6…
first Sep 4, 2026 -
Medium max 6.5SUSE-SU-2026:23628-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 6.8SUSE-SU-2026:23624-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 4, 2026 -
Medium max 4.0SUSE-SU-2026:23621-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23620-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 5.3SUSE-SU-2026:23619-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).
first Sep 3, 2026 -
Low max 2.0SUSE-SU-2026:23618-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:23614-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 3, 2026 -
Medium max 5.5SUSE-SU-2026:23613-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:23612-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 3, 2026 -
Medium max 6.8SUSE-SU-2026:23610-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…
first Sep 3, 2026 -
Critical max 9.8SUSE-SU-2026:23609-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…
first Sep 2, 2026 -
Low max 2.3SUSE-SU-2026:23607-1 1 CVE
Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged (bsc#1249011).
first Sep 2, 2026 -
UnscoredSUSE-SU-2026:23606-1 0 CVEs
Security update for lkl
This update for lkl fixes the following issues: Changes in lkl: - Updated to match current kernel.
first Sep 2, 2026 -
High max 7.1SUSE-SU-2026:23604-1 11 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in `unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428). - CVE-2026-59184: out-…
first Sep 2, 2026 -
High max 7.8SUSE-SU-2026:23603-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…
first Sep 2, 2026 -
High max 7.2SUSE-SU-2026:23602-1 10 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 21, 2026 -
High max 8.8SUSE-SU-2026:23601-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: malicious or MiTM VNC servers can force a connecting `libvncclient` to write attacker-controlled data past the end of a framebuffer, which can lead to a crash or arbitrary code executio…
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:23597-1 3 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via `ares_getaddrinfo()` over TCP (bsc#1270416). - CVE-2026-69184: CPU exhaustion denial …
first Sep 1, 2026 -
Critical max 9.1SUSE-SU-2026:23595-1 24 CVEs
Security update for dovecot24
This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: `submission-login`: panic when `mail_max_userip_connections` is reached (bsc#1276794). - CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799). - CVE-2026-336…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:23593-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 1, 2026 -
UnscoredSUSE-SU-2026:23592-1 0 CVEs
Security update for wicked2nm
This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - `serde_with`: `KeyValueMap` serialization panics on empty sequence or map entries (bsc#1271848). Other updates and bugfixes: * Build(deps): bump `serde_with` from …
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:23591-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763). …
first Aug 31, 2026 -
High max 7.8SUSE-SU-2026:23589-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:23585-1 3 CVEs
Security update for openssl-3-x86_64-v3-livepatches
This update for openssl-3-x86_64-v3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271713, bsc#1271712). - CVE-2026-14457: RPK server signature algorith…
first Aug 31, 2026 -
UnscoredSUSE-SU-2026:23583-1 0 CVEs
Security update for libgpg-error
This update for libgpg-error fixes the following issue: - Out-of-bounds read in `_gpgrt_vfnameconcat` of `stringutils.c` when the `GPGRT_FCONCAT_SYSCONF` flag is used (bsc#1263078).
first Aug 31, 2026 -
High max 8.8SUSE-SU-2026:23582-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026