35,560 results · Feed
-
High max 8.1SUSE-SU-2026:4379-1 28 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.6.8: - CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). - CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). - CVE-2026-19696: Ixia IxVeriWave and Vector Inf…
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4377-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
UnscoredSUSE-SU-2026:4378-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). - Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952). - Heap out-of-bounds…
first Sep 28, 2026 -
Medium max 5.7SUSE-SU-2026:4376-1 14 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582). - CVE-2026-62946…
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4375-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
UnscoredSUSE-SU-2026:4374-1 0 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2026-49275: out of bounds read in CrwMap::decodeBasic (bsc#1277791). - CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files (bsc#1277579). - CVE-2026-68547: hea…
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:4373-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 28, 2026 -
High max 7.5SUSE-SU-2026:4372-1 3 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278681) - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established ch…
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4368-1 2 CVEs
Security update for libsodium
This update for libsodium fixes the following issues: Update to 1.0.22 (jsc#PED-16890): * Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the crypto_kem_mlkem768_*() functions. * X-Win…
first Sep 28, 2026 -
High max 7.1SUSE-SU-2026:4370-1 1 CVE
Security update for redis
This update for redis fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).
first Sep 28, 2026 -
Medium max 5.3SUSE-SU-2026:4365-1 2 CVEs
Security update for python-soupsieve
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFI…
first Sep 28, 2026 -
Critical max 9.3SUSE-SU-2026:4364-1 10 CVEs
Security update for hplip
This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain c…
first Sep 28, 2026 -
Critical max 9.3SUSE-SU-2026:4362-1 10 CVEs
Security update for hplip
This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain c…
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4359-1 5 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: …
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4357-1 5 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: …
first Sep 28, 2026 -
Critical max 9.8SUSE-SU-2026:4356-1 6 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…
first Sep 28, 2026 -
Critical max 9.3SUSE-SU-2026:4371-1 10 CVEs
Security update for hplip
This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain c…
first Sep 28, 2026 -
Medium max 6.5SUSE-SU-2026:4363-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 28, 2026 -
High max 7.7SUSE-SU-2026:4355-1 31 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2025-23085: memory leak when remote peer abruptly closes socket without sending GOAWAY notification (bsc#1236250). - CVE-2025-23166: improper error handling in async cryptographic operations crashes p…
first Sep 28, 2026 -
Medium max 6.1SUSE-SU-2026:23879-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).
first Sep 22, 2026 -
High max 7.5SUSE-SU-2026:4143-1 9 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23816-1 5 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23806-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23759-1 5 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4141-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 14, 2026 -
Critical max 10.0SUSE-SU-2026:4140-1 139 CVEs
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen
This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: This update ships Firefox Extended Support Release 153.2.0 ESR * Fixed: Various security fixes. MFSA 2026-85 (bsc#1278001): * CVE-2…
first Sep 14, 2026 -
Critical max 9.1SUSE-SU-2026:4139-1 34 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2024-23184: parsing of messages containing many address headers (From, To, Cc, Bcc, etc.) could be excessively CPU intensive (bsc#1229184). - CVE-2024-23185: large headers can cause resource exhausti…
first Sep 14, 2026 -
Medium max 5.3SUSE-SU-2026:23880-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
first Sep 22, 2026 -
Medium max 6.5SUSE-SU-2026:23878-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
first Sep 22, 2026 -
Medium max 4.3SUSE-SU-2026:23877-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 21, 2026 -
High max 7.5SUSE-SU-2026:23876-1 4 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56854,CVE-2026-56855,CVE-…
first Sep 18, 2026 -
High max 7.6SUSE-SU-2026:23875-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 18, 2026 -
Critical max 9.1SUSE-SU-2026:23874-1 4 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.o…
first Sep 17, 2026 -
High max 8.2SUSE-SU-2026:23873-1 18 CVEs
Security update for jq
This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd() function (bsc#976992). - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in `decNumberToString` (bsc#1218034)…
first Sep 17, 2026 -
Critical max 9.8SUSE-SU-2026:23821-1 5 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23820-1 5 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23818-1 5 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23815-1 5 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:23814-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23813-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026