35,560 results · Feed
-
High max 8.8SUSE-SU-2026:23580-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Aug 30, 2026 -
Critical max 10.0SUSE-SU-2026:23590-1 115 CVEs
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. * Fixed: Various security fixes. MFSA 2026-77 (bsc#1274867): * CVE-2026-74934 Site is…
first Aug 31, 2026 -
High max 8.7openSUSE-SU-2026:11911-1 2 CVEs
wait4x-3.7.2-1.1 on GA media
These are all security issues fixed in the wait4x-3.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.5openSUSE-SU-2026:11909-1 1 CVE
tor-0.4.9.13-1.1 on GA media
These are all security issues fixed in the tor-0.4.9.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11908-1 12 CVEs
tomcat11-11.0.26-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11907-1 12 CVEs
tomcat10-10.1.60-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.60-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8openSUSE-SU-2026:11906-1 12 CVEs
tomcat-9.0.122-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.122-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 5.5openSUSE-SU-2026:11905-1 1 CVE
tealdeer-1.8.0-2.1 on GA media
These are all security issues fixed in the tealdeer-1.8.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
UnscoredopenSUSE-SU-2026:11904-1 1 CVE
python313-ruamel.yaml-0.19.1-2.1 on GA media
These are all security issues fixed in the python313-ruamel.yaml-0.19.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.5openSUSE-SU-2026:11901-1 11 CVEs
php8-8.5.11-1.1 on GA media
These are all security issues fixed in the php8-8.5.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 8.8openSUSE-SU-2026:11900-1 1 CVE
mistral-vibe-2.25.8-1.1 on GA media
These are all security issues fixed in the mistral-vibe-2.25.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.1openSUSE-SU-2026:11899-1 3 CVEs
libtcnative-2-0-2.0.16-1.1 on GA media
These are all security issues fixed in the libtcnative-2-0-2.0.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.4openSUSE-SU-2026:11895-1 7 CVEs
libXi-devel-1.8.3-2.1 on GA media
These are all security issues fixed in the libXi-devel-1.8.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.5openSUSE-SU-2026:11894-1 3 CVEs
libX11-6-1.8.13-3.1 on GA media
These are all security issues fixed in the libX11-6-1.8.13-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Medium max 6.3openSUSE-SU-2026:11892-1 2 CVEs
helm3-3.22.0-2.1 on GA media
These are all security issues fixed in the helm3-3.22.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11891-1 1 CVE
gpsd-3.27.5-4.1 on GA media
These are all security issues fixed in the gpsd-3.27.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
High max 7.8openSUSE-SU-2026:11890-1 4 CVEs
gimp-3.2.6-3.1 on GA media
These are all security issues fixed in the gimp-3.2.6-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4386-1 1 CVE
Security update for perl-DBI
This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).
-
UnscoredSUSE-SU-2026:23731-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). Non security issues fixed: - Econf parser adds tags in drop-in files outsi…
first Sep 9, 2026 -
High max 8.7SUSE-SU-2026:23730-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278270). - CVE-2026-84304: …
first Sep 9, 2026 -
Medium max 6.8SUSE-SU-2026:23728-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 11, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 11, 2026 -
Medium max 5.9SUSE-SU-2026:23722-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:23720-1 12 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-authori…
first Sep 9, 2026 -
Low max 3.8SUSE-SU-2026:23717-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:23715-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
Critical max 9.6SUSE-SU-2026:23712-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23709-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). Non security issues fixed: - Econf parser adds tags in drop-in files outsi…
first Sep 8, 2026 -
High max 7.8SUSE-SU-2026:23704-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 10, 2026 -
Medium max 5.9SUSE-SU-2026:23702-1 2 CVEs
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens (bsc#1277639). - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification (bsc#1278707).
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:23700-1 12 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-authori…
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:23695-1 2 CVEs
Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).
first Sep 9, 2026 -
Critical max 9.6SUSE-SU-2026:23692-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23690-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23689-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). Non security issues fixed: - Econf parser adds tags in drop-in files outsi…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23688-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23687-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require …
first Sep 13, 2026 -
Critical max 9.8SUSE-SU-2026:23686-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23684-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026 -
Critical max 9.8SUSE-SU-2026:23681-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 12, 2026