35,560 results · Feed
-
Critical max 9.8SUSE-SU-2026:23790-1 5 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remov…
first Sep 16, 2026 -
High max 7.8SUSE-SU-2026:23789-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
first Sep 16, 2026 -
High max 7.5SUSE-SU-2026:23788-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712). - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (bsc#1274792). - CVE…
first Sep 16, 2026 -
High max 7.0SUSE-SU-2026:23787-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] - split all plugins into…
first Sep 16, 2026 -
Critical max 10.0SUSE-SU-2026:23784-1 24 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001): * CVE-2026-75874 (bmo#2039972) Sandbox escape in the Remote Settings Client component * CVE-2026-84118 (bmo#2057457) Use-after-…
first Sep 15, 2026 -
Medium max 6.5SUSE-SU-2026:23782-1 3 CVEs
Security update for kronosnet
This update for kronosnet fixes the following issues: - CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments can lead to potential exposure of encryption keys (bsc#1271923). - CVE-2026-15812: im…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23781-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23780-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23779-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23778-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:23777-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23776-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23775-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23772-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23770-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23774-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23773-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23771-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:23763-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23762-1 4 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23761-1 4 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…
first Sep 15, 2026 -
Critical max 9.1SUSE-SU-2026:23745-1 4 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.o…
first Sep 17, 2026 -
Critical max 9.1SUSE-SU-2026:23743-1 24 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-0864: improper handling of line-ending characters can lead to configuration…
first Sep 16, 2026 -
High max 7.8SUSE-SU-2026:23742-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 16, 2026 -
High max 7.7SUSE-SU-2026:23738-1 7 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs e…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:23737-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:23764-1 2 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68138: ne…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:23746-1 6 CVEs
Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722). - C…
first Sep 17, 2026 -
High max 8.2SUSE-SU-2026:23740-1 6 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:23739-1 7 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854: golang.org/x/crypto/ssh: authentication bypass and deadlocks in…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:23736-1 7 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authenticat…
first Sep 14, 2026 -
Medium max 6.8SUSE-SU-2026:23735-1 2 CVEs
Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure (bsc#1265071). - CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).
first Sep 14, 2026 -
Critical max 9.6openSUSE-SU-2026:11888-1 108 CVEs
chromedriver-154.0.8037.57-1.1 on GA media
These are all security issues fixed in the chromedriver-154.0.8037.57-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 26, 2026 -
Medium max 6.1SUSE-SU-2026:4351-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917).
first Sep 25, 2026 -
Medium max 6.1SUSE-SU-2026:4350-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619).
first Sep 25, 2026 -
High max 8.7openSUSE-SU-2026:21956-1 2 CVEs
Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - Adding missing CVE references already fixed in the past: CVE-2026-77568 bsc#1281638, CVE-2026-68914 bsc#1281637.
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:21954-1 1 CVE
Security update for osmo-iuh
This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iu_client: reject oversized RANAP NAS-PDU (boo#1281607).
first Sep 23, 2026 -
Medium max 6.5openSUSE-SU-2026:21953-1 1 CVE
Security update for python-asyncssh
This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets (bsc#1280972)
first Sep 23, 2026 -
UnscoredopenSUSE-SU-2026:21952-1 0 CVEs
Security update for openSUSE-signkey-cert
This update for openSUSE-signkey-cert fixes the following issues: Adds the UEFI signing key of Leap 16.0. This needs to be imported via the MOK dialog on boot.
first Sep 23, 2026 -
Critical max 9.6openSUSE-SU-2026:21951-1 63 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESR (MFSA 2026-93, bsc#1280371): - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…
first Sep 24, 2026