35,560 results · Feed
-
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…
first Sep 8, 2026 -
Low max 3.8SUSE-SU-2026:23527-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23526-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:23525-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.5SUSE-SU-2026:23523-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725).
first Sep 7, 2026 -
Critical max 9.8SUSE-SU-2026:23522-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#12…
first Sep 4, 2026 -
High max 7.5SUSE-SU-2026:23521-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230…
first Sep 4, 2026 -
Medium max 5.1SUSE-SU-2026:23520-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 4, 2026 -
Medium max 6.2SUSE-SU-2026:23519-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:23518-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 3, 2026 -
High max 7.8SUSE-SU-2026:23515-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 2, 2026 -
High max 8.3SUSE-SU-2026:23514-1 12 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Changes for libpng16: - Version update to 1.6.58 (jsc#PED-16190).
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:23513-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 2, 2026 -
High max 8.6openSUSE-SU-2026:21850-1 6 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: Changes in cups-filters: - CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field. A user who controls an IEEE-1284 device ID consumed by `cfIEEE1284Ge…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21849-1 2 CVEs
Security update for kimi-code
This update for kimi-code fixes the following issues: Changes in kimi-code: Update to version 0.42.0: * Add an experimental Updates panel with paginated progress messages from the main agent and subagents, enabled with KIMI_CODE_EXPERIMENTAL_NOTIFY_USER=1 * T…
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21846-1 3 CVEs
Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: authentication bypass and deadlocks in the crypto/ssh library * Add update-go-crypto.patch to update affected dependency (bsc…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21843-1 3 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: update vendor.tar to fix: * bsc#1279044, CVE-2026-84445 * bsc#1279224, CVE-2026-84304 * bsc#1279320, CVE-2026-84303: cadvisor: google.golang.org/grpc: xDS RBAC HTTP filter implementatio…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21841-1 7 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - upd…
first Sep 14, 2026 -
Medium max 5.5openSUSE-SU-2026:21839-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-66757: Fixed signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1279838).
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:21835-1 4 CVEs
Security update for trivy
This update for trivy fixes the following issues: - CVE-2026-53495: containerd: CRI ExecSync goroutine leak can lead to node-level denial of service (bsc#1280111). - CVE-2026-56854: golang.org/x/crypto/ssh: unenforced source-address restrictions across non-pu…
first Sep 14, 2026 -
High max 8.7openSUSE-SU-2026:21834-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4183-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-6…
-
High max 7.5SUSE-SU-2026:4182-1 1 CVE
Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629).
-
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 14, 2026 -
High max 8.4
Security update for clamav
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…
first Sep 14, 2026 -
Medium max 6.7SUSE-SU-2026:4181-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2025-9615: avoid non-admin user using other users' certificate (bsc#1257359). - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696).
-
High max 8.7SUSE-SU-2026:4178-1 4 CVEs
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4176-1 3 CVEs
Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501):…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4175-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#12…
first Sep 14, 2026 -
High max 8.7SUSE-SU-2026:4174-1 9 CVEs
Security update for python39.SUSE_SLE-15-SP3_Update
This update for python39.SUSE_SLE-15-SP3_Update fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CV…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4170-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: i…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4154-1 2 CVEs
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone (bsc#1272369).
first Sep 14, 2026 -
High max 8.1SUSE-SU-2026:4153-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833): - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bs…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4149-1 17 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption (bsc#1269550). - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c…
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4148-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 14, 2026 -
Critical max 9.8SUSE-SU-2026:4172-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64…
first Sep 14, 2026 -
High max 7.8SUSE-SU-2026:4168-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-68…
first Sep 14, 2026 -
Critical max 10.0SUSE-SU-2026:4156-1 139 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen
This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR * Fixed: Various security fixes. MFSA 2026-85 (bsc#127800…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4152-1 9 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
Critical max 9.1SUSE-SU-2026:4151-1 1 CVE
Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issue: - CVE-2026-15747: exposing a stable representation of the session CSRF token to a BREACH compression oracle (bsc#1271431).
first Sep 14, 2026