35,560 results · Feed
-
Critical max 9.8SUSE-SU-2026:23487-1 9 CVEs
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23480-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RT_Update_29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23428-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23426-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944). - CVE-2025-68214: timers: Fix NULL function pointer ra…
first Sep 10, 2026 -
Critical max 9.8SUSE-SU-2026:4119-1 11 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - C…
first Sep 10, 2026 -
High max 7.5SUSE-SU-2026:4115-1 11 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360). - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Lea…
first Sep 9, 2026 -
Critical max 9.8SUSE-SU-2026:4114-1 11 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - C…
first Sep 9, 2026 -
Medium max 6.9SUSE-SU-2026:4113-1 2 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Sep 9, 2026 -
Medium max 5.4SUSE-SU-2026:4111-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with unsupported response_types can cause unauthenticated open redirects (bsc#1275231).
first Sep 9, 2026 -
Medium max 4.2SUSE-SU-2026:4105-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
first Sep 9, 2026 -
Low max 2.0SUSE-SU-2026:4104-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists (bsc#1257599)
first Sep 9, 2026 -
UnscoredSUSE-SU-2026:4096-1 0 CVEs
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). - hasCredentials() requires both username AND password to be non-empty (bs…
first Sep 9, 2026 -
Medium max 6.2SUSE-SU-2026:23501-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:23499-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
Critical max 9.1SUSE-SU-2026:23498-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-20…
first Sep 6, 2026 -
Medium max 6.5SUSE-SU-2026:23495-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 4.8SUSE-SU-2026:23494-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Critical max 9.8SUSE-SU-2026:23486-1 11 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpoll: fix e…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23485-1 13 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp: validat…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23484-1 18 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23483-1 18 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix dou…
first Sep 8, 2026 -
Critical max 9.8SUSE-SU-2026:23482-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23240: tls: Fix race condition in tls…
first Sep 8, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731). - CVE-2025-68214: timers: Fix NULL funct…
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23479-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0_Update_29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29
first Sep 8, 2026 -
Low max 3.8SUSE-SU-2026:23478-1 1 CVE
Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).
first Sep 8, 2026 -
UnscoredSUSE-SU-2026:23476-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 8, 2026 -
Critical max 9.1SUSE-SU-2026:23473-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837). - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (b…
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23470-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Low max 2.0SUSE-SU-2026:23469-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:23466-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 3, 2026 -
Medium max 5.5SUSE-SU-2026:23465-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:23464-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 3, 2026 -
Critical max 9.8SUSE-SU-2026:23463-1 11 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…
first Sep 2, 2026 -
Critical max 9.8SUSE-SU-2026:23456-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#12…
first Sep 4, 2026 -
Medium max 5.1SUSE-SU-2026:23455-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23454-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:23451-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 3, 2026 -
Medium max 6.2SUSE-SU-2026:23450-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 3, 2026 -
Medium max 5.1SUSE-SU-2026:23446-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Sep 2, 2026