35,560 results · Feed
-
Critical max 9.8SUSE-SU-2026:4150-1 17 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption (bsc#1269550). - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4147-1 7 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
High max 7.5SUSE-SU-2026:4146-1 10 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NU…
first Sep 14, 2026 -
Medium max 5.1SUSE-SU-2026:4145-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 14, 2026 -
High max 7.1SUSE-SU-2026:4144-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 14, 2026 -
Medium max 6.1openSUSE-SU-2026:11780-1 1 CVE
python313-autobahn-26.7.1-1.1 on GA media
These are all security issues fixed in the python313-autobahn-26.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Critical max 10.0openSUSE-SU-2026:11778-1 2 CVEs
mistral-vibe-2.25.4-1.1 on GA media
These are all security issues fixed in the mistral-vibe-2.25.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 6.9openSUSE-SU-2026:11782-1 1 CVE
znc-1.10.3-1.1 on GA media
These are all security issues fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:11781-1 3 CVEs
rz-pm-0.3.6-1.1 on GA media
These are all security issues fixed in the rz-pm-0.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11779-1 1 CVE
mkvtoolnix-101.0-2.1 on GA media
These are all security issues fixed in the mkvtoolnix-101.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Low max 3.3openSUSE-SU-2026:11777-1 1 CVE
liblzmasdk26-26.03-1.1 on GA media
These are all security issues fixed in the liblzmasdk26-26.03-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11776-1 1 CVE
kubernetes1.36-apiserver-1.36.4-2.1 on GA media
These are all security issues fixed in the kubernetes1.36-apiserver-1.36.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11775-1 1 CVE
kubernetes1.35-apiserver-1.35.8-2.1 on GA media
These are all security issues fixed in the kubernetes1.35-apiserver-1.35.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11774-1 1 CVE
kubernetes1.34-apiserver-1.34.11-2.1 on GA media
These are all security issues fixed in the kubernetes1.34-apiserver-1.34.11-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 8.8openSUSE-SU-2026:11773-1 112 CVEs
kernel-devel-7.2.5-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.5openSUSE-SU-2026:11772-1 1 CVE
gitea-tea-0.16.0-1.1 on GA media
These are all security issues fixed in the gitea-tea-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11771-1 9 CVEs
gimp-3.2.6-1.1 on GA media
These are all security issues fixed in the gimp-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
High max 7.8openSUSE-SU-2026:11770-1 1 CVE
chirp-20260911-1.1 on GA media
These are all security issues fixed in the chirp-20260911-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
UnscoredSUSE-SU-2026:4112-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). - hasCredentials() requires both username AND password to be non-empty (bs…
first Sep 9, 2026 -
Medium max 5.1SUSE-SU-2026:4109-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 9, 2026 -
High max 8.1SUSE-SU-2026:4107-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833): - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bs…
first Sep 9, 2026 -
High max 7.5SUSE-SU-2026:4106-1 1 CVE
Security update for golang-github-vpenso-prometheus_slurm_exporter
This update for golang-github-vpenso-prometheus_slurm_exporter fixes the following issue: - CVE-2022-21698: github.com/prometheus/client_golang/prometheus/promhttp: Denial of service using InstrumentHandlerCounter (bsc#1248703). Changes for golang-github-vpen…
first Sep 9, 2026 -
UnscoredSUSE-SU-2026:23507-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). Non security issues fixed: - Econf parser adds tags in drop-in files outsi…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23506-1 8 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass establis…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23489-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023). - CVE-2026-53246: sctp:…
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…
first Sep 8, 2026 -
High max 7.1SUSE-SU-2026:23475-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 8, 2026 -
High max 7.8SUSE-SU-2026:23460-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…
first Sep 2, 2026 -
High max 7.2SUSE-SU-2026:23449-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 3, 2026 -
Critical max 9.8SUSE-SU-2026:23439-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23434-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23431-1 20 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23430-1 21 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Low max 3.8SUSE-SU-2026:4123-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 10, 2026 -
Low max 3.8SUSE-SU-2026:4122-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 10, 2026 -
Low max 3.8SUSE-SU-2026:4108-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 9, 2026 -
High max 8.8SUSE-SU-2026:4095-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/userauth…
first Sep 9, 2026 -
UnscoredSUSE-SU-2026:23502-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:23496-1 2 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276612). - CVE-2026-81092: github.com/mark3labs/mcp-go/serv…
first Sep 6, 2026 -
Critical max 9.8SUSE-SU-2026:23488-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix po…
first Sep 8, 2026