35,560 results · Feed
-
Critical max 10.0SUSE-SU-2026:4209-1 27 CVEs
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946). - CVE-2026-25680: golang.org/x/net/html: denial of service when parsing arbitrary HTML (bsc#…
-
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
-
High max 8.7SUSE-SU-2026:4206-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
-
High max 7.5SUSE-SU-2026:4202-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (bsc#1278738). - CVE-2026-81666: integer overflow in check_memb_commit_token_sanity may bypass me…
-
High max 8.8SUSE-SU-2026:4200-1 4 CVEs
Security update for gvfs
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…
-
Critical max 9.8openSUSE-SU-2026:11791-1 1 CVE
sngrep-1.8.4-2.1 on GA media
These are all security issues fixed in the sngrep-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 7.8openSUSE-SU-2026:11790-1 2 CVEs
libmbedcrypto7-2.28.10-5.1 on GA media
These are all security issues fixed in the libmbedcrypto7-2.28.10-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Low max 3.3openSUSE-SU-2026:11789-1 1 CVE
jq-1.8.2-2.1 on GA media
These are all security issues fixed in the jq-1.8.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 8.8openSUSE-SU-2026:11788-1 5 CVEs
gvfs-1.60.3-1.1 on GA media
These are all security issues fixed in the gvfs-1.60.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
High max 7.7openSUSE-SU-2026:11787-1 5 CVEs
glibc-2.44-2.1 on GA media
These are all security issues fixed in the glibc-2.44-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Low max 3.3openSUSE-SU-2026:11786-1 1 CVE
discount-3.0.2.0-1.1 on GA media
These are all security issues fixed in the discount-3.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Medium max 4.3openSUSE-SU-2026:11785-1 1 CVE
cups-2.4.19-3.1 on GA media
These are all security issues fixed in the cups-2.4.19-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Critical max 9.1openSUSE-SU-2026:11784-1 2 CVEs
libcjose-devel-0.6.2.8-2.1 on GA media
These are all security issues fixed in the libcjose-devel-0.6.2.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Medium max 4.4openSUSE-SU-2026:11783-1 1 CVE
alsa-1.2.16.1-2.1 on GA media
These are all security issues fixed in the alsa-1.2.16.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 15, 2026 -
Critical max 9.1SUSE-SU-2026:23512-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837). - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (b…
first Sep 2, 2026 -
High max 8.7SUSE-SU-2026:4195-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4194-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4193-1 2 CVEs
Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4192-1 1 CVE
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458).
first Sep 15, 2026 -
High max 8.8SUSE-SU-2026:4191-1 3 CVEs
Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-87817: failure to properly validade the git directory location allows attackers to impersonate the git directory using tracked files and execute arbitrary code by placing pre-commit hooks…
first Sep 15, 2026 -
Critical max 9.8SUSE-SU-2026:4190-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369). - CVE-2026-52955: libceph: Fix pote…
first Sep 15, 2026 -
High max 8.7SUSE-SU-2026:4188-1 7 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…
first Sep 15, 2026 -
High max 7.8SUSE-SU-2026:4185-1 2 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…
first Sep 15, 2026 -
UnscoredSUSE-SU-2026:4129-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). - hasCredentials() requires both username AND password to be non-empty (bs…
first Sep 11, 2026 -
Medium max 5.4SUSE-SU-2026:4128-1 1 CVE
Security update for php7
This update for php7 fixes the following issue: - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). Other changes: - Allow removal of apache2-mod_php7 even if the php7 module is not enabled (bsc#1205782, bsc#1276531).
first Sep 11, 2026 -
Critical max 9.8SUSE-SU-2026:4126-1 11 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE…
first Sep 11, 2026 -
High max 8.7SUSE-SU-2026:4125-1 4 CVEs
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276733). - CVE-2026-84303: google.golang.org/g…
first Sep 11, 2026 -
Critical max 9.8SUSE-SU-2026:23541-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23240: tls: Fix race condition in tls…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23540-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RT_Update_29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29
first Sep 8, 2026 -
High max 7.2SUSE-SU-2026:23539-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:23538-1 3 CVEs
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#12…
first Sep 2, 2026 -
Critical max 9.8SUSE-SU-2026:23537-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023). - CVE-2026-53246: sctp:…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23536-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix po…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23535-1 9 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23534-1 11 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpoll: fix e…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23533-1 13 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp: validat…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23532-1 18 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23531-1 18 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23530-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0_Update_29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731). - CVE-2025-68214: timers: Fix NULL funct…
first Sep 8, 2026