35,560 results · Feed
-
Critical max 9.8openSUSE-SU-2026:21950-1 6 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denia…
first Sep 24, 2026 -
Critical max 9.8openSUSE-SU-2026:21946-1 1 CVE
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).
first Sep 24, 2026 -
High max 7.5openSUSE-SU-2026:21945-1 20 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…
first Sep 24, 2026 -
Critical max 9.1openSUSE-SU-2026:21944-1 2 CVEs
Security update for cjose
This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…
first Sep 23, 2026 -
High max 8.7openSUSE-SU-2026:21940-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 23, 2026 -
High max 7.8openSUSE-SU-2026:21939-1 1 CVE
Security update for kbd
This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).
first Sep 23, 2026 -
High max 8.2openSUSE-SU-2026:21938-1 7 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …
first Sep 23, 2026 -
High max 8.8openSUSE-SU-2026:21935-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write (bsc#1248078).
first Sep 23, 2026 -
High max 8.7openSUSE-SU-2026:21933-1 8 CVEs
Security update for sdbootutil
This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270192). - CVE-2026-41677: out-of-bounds read in PEM password callback w…
first Sep 23, 2026 -
Medium max 4.3openSUSE-SU-2026:21929-1 6 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: Update to 3.8.8 (bugfix release): - CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL (bsc#1279908) - CVE-2026-61908: JMAP email-header blob ID out-of-bounds index (bsc…
first Sep 22, 2026 -
Medium max 6.2openSUSE-SU-2026:21928-1 1 CVE
Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery (SSRF) (bsc#1279942)
first Sep 21, 2026 -
High max 8.7openSUSE-SU-2026:21927-1 6 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Fix potential authentication bypass and deadlocks in the crypto/ssh library by updating golang.org/x/crypto to v0.56.0. CVE-2026-56854,CVE-2026-78662,CVE-2026-56855 (bsc#1278666) - …
first Sep 21, 2026 -
Medium max 5.9openSUSE-SU-2026:21925-1 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
first Sep 21, 2026 -
Critical max 10.0openSUSE-SU-2026:21924-1 17 CVEs
Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 * Update vendor (boo#1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855) * Propagate edge registration errors over QUIC and fix supervisor error …
first Sep 21, 2026 -
High max 7.5openSUSE-SU-2026:21918-1 4 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: Changes in warewulf4: - updating to v4.7.1 with the following changes * wwctl power no longer falls back to the local BMC for nodes with no ipmi: ipaddr:, which could power off the Warewulf server itself *…
first Sep 18, 2026 -
High max 7.8openSUSE-SU-2026:21915-1 1 CVE
Security update for budgie-backgrounds
This update for budgie-backgrounds fixes the following issues: Changes in budgie-backgrounds: - Convert images to JXL, add submission format policy, drop jhead dep because of CVE-2025-44906 (bsc#1243819)
first Sep 17, 2026 -
High max 7.1openSUSE-SU-2026:21912-1 1 CVE
Security update for python-PyMuPDF
This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-82035: a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py (bsc#1280486)
first Sep 22, 2026 -
Critical max 10.0openSUSE-SU-2026:21910-1 885 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…
first Sep 22, 2026 -
Low max 3.7openSUSE-SU-2026:21911-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…
first Sep 22, 2026 -
High max 8.9openSUSE-SU-2026:21909-1 1 CVE
Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).
first Sep 22, 2026 -
High max 7.5openSUSE-SU-2026:21908-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
first Sep 22, 2026 -
High max 7.9openSUSE-SU-2026:21905-1 8 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…
first Sep 22, 2026 -
UnscoredopenSUSE-SU-2026:21904-1 0 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic (bsc#1277791). - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files (bsc#1277579). - CVE-2026-68547: Hea…
first Sep 22, 2026 -
High max 8.7openSUSE-SU-2026:21903-1 11 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…
first Sep 22, 2026 -
High max 8.2openSUSE-SU-2026:21902-1 4 CVEs
Security update for zstd-jni
This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…
first Sep 21, 2026 -
High max 7.6openSUSE-SU-2026:21901-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…
first Sep 21, 2026 -
High max 7.5openSUSE-SU-2026:21900-1 1 CVE
Security update for jsoup, re2j
This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…
first Sep 21, 2026 -
Critical max 9.6openSUSE-SU-2026:21899-1 7 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs (bsc#1265542). - CVE-2026-33814: golang.org/x/net/http2: infinite…
first Sep 21, 2026 -
Critical max 9.8openSUSE-SU-2026:21898-1 6 CVEs
Security update for distribution
This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control…
first Sep 21, 2026 -
Critical max 10.0
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…
first Sep 21, 2026 -
Medium max 5.3openSUSE-SU-2026:21894-1 1 CVE
Security update for httpcomponents-client
This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported `Content-Encoding` header value in a response message (bsc#1273163).
first Sep 20, 2026 -
Medium max 4.3openSUSE-SU-2026:21893-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).
first Sep 20, 2026 -
High max 7.4openSUSE-SU-2026:21891-1 3 CVEs
Security update for ant
This update for ant fixes the following issues: - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats (bsc#1188469). - CVE-2025-7962: jakarta: improper neutralization of \r and \n UTF-8 characters can …
first Sep 20, 2026 -
High max 7.0openSUSE-SU-2026:21890-1 1 CVE
Security update for gdb
This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
first Sep 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21889-1 8 CVEs
Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items (bsc#1279443). - CVE-2026-84384: brotli/zlib decompression paths lack output-size lim…
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21888-1 1 CVE
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow unauthenticated denial of service (bsc#1273354).
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21887-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738). - CVE-2026-81666: integer overflow in check_memb_commit_token_sanity may bypass me…
first Sep 20, 2026 -
High max 8.7openSUSE-SU-2026:21886-1 3 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279274). - CVE-2026-84304…
first Sep 20, 2026 -
High max 7.5openSUSE-SU-2026:21884-1 5 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278681). - CVE-2026-71556: github.com/go-git/go-git/v5: a…
first Sep 20, 2026 -
Critical max 9.8openSUSE-SU-2026:21883-1 6 CVEs
Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722). - C…
first Sep 20, 2026