35,526 results · Feed
-
Critical max 9.9SUSE-SU-2026:24553-1 98 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2026-43091…
first Oct 27, 2026 -
Critical max 9.8SUSE-SU-2026:24561-1 10 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
High max 8.2SUSE-SU-2026:24580-1 1 CVE
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587).
first Oct 30, 2026 -
Critical max 9.8SUSE-SU-2026:24563-1 10 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…
first Nov 2, 2026 -
High max 7.8SUSE-SU-2026:24557-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issue: - CVE-2026-96889: Use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.56.6: + This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-…
first Oct 30, 2026 -
Critical max 9.8SUSE-SU-2026:24560-1 12 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
Critical max 9.8SUSE-SU-2026:24565-1 12 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…
first Nov 2, 2026 -
UnscoredSUSE-SU-2026:5126-1 0 CVEs
Security update for mozilla-nss
This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions whe…
first Nov 6, 2026 -
High max 7.5SUSE-SU-2026:5130-1 1 CVE
Security update for python-certifi
This update for python-certifi fixes the following issues: - CVE-2024-39689: remove root certificates from `GLOBALTRUST` from the root store (bsc#1227519). - Removed eMudhra Intermediates due to compromise (bsc#1286261, bsc#1287723). Changes for python-certif…
first Nov 6, 2026 -
Critical max 9.3SUSE-SU-2026:5127-1 11 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769). - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770…
first Nov 6, 2026 -
UnscoredSUSE-SU-2026:5124-1 0 CVEs
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image (bsc#1286378).
first Nov 5, 2026 -
High max 7.1SUSE-SU-2026:5123-1 1 CVE
Security update for cpupower
This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: Release to latest kernel-source including these fixes: - intel-speed-select: Harden daemo…
first Nov 5, 2026 -
Critical max 9.2
Security update for python-Brotli
This update for python-Brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779).
-
High max 7.0openSUSE-SU-2026:12433-1 19 CVEs
java-11-openj9-11.0.33.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 9.2
python313-autobahn-26.11.1-1.1 on GA media
These are all security issues fixed in the python313-autobahn-26.11.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.0openSUSE-SU-2026:12434-1 18 CVEs
java-17-openj9-17.0.21.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.8openSUSE-SU-2026:12444-1 7 CVEs
scribus-1.6.7-1.1 on GA media
These are all security issues fixed in the scribus-1.6.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Low max 1.9openSUSE-SU-2026:12442-1 1 CVE
libQt6Core5Compat6-6.12.0-2.1 on GA media
These are all security issues fixed in the libQt6Core5Compat6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 8.2openSUSE-SU-2026:12424-1 11 CVEs
agama-web-ui-25+475.275dd4727-56.1 on GA media
These are all security issues fixed in the agama-web-ui-25+475.275dd4727-56.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.5openSUSE-SU-2026:12425-1 2 CVEs
amazon-cloudwatch-agent-1.300074.0-1.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300074.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Medium max 5.8openSUSE-SU-2026:12428-1 1 CVE
ghostscript-10.08.0-4.1 on GA media
These are all security issues fixed in the ghostscript-10.08.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 9.8openSUSE-SU-2026:12426-1 213 CVEs
chromedriver-157.0.8103.38-1.1 on GA media
These are all security issues fixed in the chromedriver-157.0.8103.38-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 8.4openSUSE-SU-2026:12429-1 3 CVEs
git-bug-0.11.0-4.1 on GA media
These are all security issues fixed in the git-bug-0.11.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 8.7openSUSE-SU-2026:12430-1 4 CVEs
google-osconfig-agent-20261103.02-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20261103.02-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.5openSUSE-SU-2026:12431-1 2 CVEs
haproxy-3.4.7+git57.0faeaeda6-2.1 on GA media
These are all security issues fixed in the haproxy-3.4.7+git57.0faeaeda6-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Low max 3.3openSUSE-SU-2026:12432-1 1 CVE
libinih-devel-63-1.1 on GA media
These are all security issues fixed in the libinih-devel-63-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 10.0SUSE-SU-2026:24550-1 1056 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: s…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:12427-1 2 CVEs
cockpit-370-1.1 on GA media
These are all security issues fixed in the cockpit-370-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 9.1openSUSE-SU-2026:12435-1 20 CVEs
java-21-openj9-21.0.13.0-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.0openSUSE-SU-2026:12436-1 20 CVEs
java-25-openj9-25.0.5.0-1.1 on GA media
These are all security issues fixed in the java-25-openj9-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Low max 2.7openSUSE-SU-2026:12441-1 1 CVE
libQt6HttpServer6-6.12.0-2.1 on GA media
These are all security issues fixed in the libQt6HttpServer6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.5openSUSE-SU-2026:12443-1 1 CVE
rsync-3.5.2-1.1 on GA media
These are all security issues fixed in the rsync-3.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
UnscoredopenSUSE-SU-2026:12445-1 0 CVEs
tpm2.0-tools-5.8-1.1 on GA media
These are all security issues fixed in the tpm2.0-tools-5.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Medium max 5.3openSUSE-SU-2026:12440-1 3 CVEs
python313-tornado6-6.6-1.1 on GA media
These are all security issues fixed in the python313-tornado6-6.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Medium max 4.3openSUSE-SU-2026:12438-1 1 CVE
proftpd-1.3.9e-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.9e-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
High max 7.5openSUSE-SU-2026:12437-1 5 CVEs
bson-devel-2.5.8-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2026 -
Critical max 9.8SUSE-SU-2026:5120-1 7 CVEs
Security update for perl-Text-CSV_XS
This update for perl-Text-CSV_XS fixes the following issues: - CVE-2026-110752: unclamped RFC 7111 selector range pre-allocation in fragment() can cause memory exhaustion via large index ranges (bsc#1286138). - CVE-2026-110754: unfreed field array memory leak…
first Nov 5, 2026 -
High max 8.1SUSE-SU-2026:5122-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
first Nov 5, 2026 -
Critical max 9.8SUSE-SU-2026:5121-1 130 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918). - CVE-2025-68741: scsi:…
first Nov 5, 2026 -
Medium max 6.5SUSE-SU-2026:5118-1 7 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…