35,560 results · Feed
-
Critical max 9.1SUSE-SU-2026:4032-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). - CVE-2026-6…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4031-1 3 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Sep 7, 2026 -
Medium max 5.6SUSE-SU-2026:4030-1 1 CVE
Security update for python313-pip
This update for python313-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Sep 7, 2026 -
Medium max 5.4SUSE-SU-2026:4029-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issue: - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).
first Sep 7, 2026 -
Medium max 5.3SUSE-SU-2026:4028-1 1 CVE
Security update for httpcomponents-client
This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported `Content-Encoding` header value in a response message (bsc#1273163).
first Sep 7, 2026 -
Medium max 5.5SUSE-SU-2026:4027-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-68743: oversized length parameters in authentication requests can cause heap out-of-bounds reads (bsc#1273925).
first Sep 7, 2026 -
Low max 2.0SUSE-SU-2026:4026-1 1 CVE
Security update for fuse-overlayfs
This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation (bsc#1273100).
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:4025-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4024-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).
first Sep 7, 2026 -
Medium max 4.2SUSE-SU-2026:4023-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4022-1 1 CVE
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).
first Sep 7, 2026 -
High max 8.3SUSE-SU-2026:4021-1 6 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: - CVE-2024-25629: out of bounds read in ares__read_line() (bsc#1220279). - CVE-2025-31498: use-after-free in read_answers() when process_answer() may re-enqueue a query (bsc#1240955). - CVE-2025-62408: c-ares…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4020-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#12…
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:4019-1 9 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was upd…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4018-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4017-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4016-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4015-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4014-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4013-1 25 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 7, 2026 -
Medium max 4.6SUSE-SU-2026:4012-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4010-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4009-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
Medium max 6.5SUSE-SU-2026:4007-1 1 CVE
Security update for file-roller
This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4006-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4005-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59186: On ILP32, the Array2D<Rgba> tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation (bsc#1276850). - CVE-2026-61…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:4004-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config d…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:4003-1 7 CVEs
Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes (bsc#1276849). - CVE-2026-59186: On ILP32, the Array2D<Rgba> tile-conversion buffer size calculation overflows, allocate…
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:4002-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…
first Sep 7, 2026 -
High max 8.8SUSE-SU-2026:4001-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#12…
first Sep 7, 2026 -
Medium max 4.0SUSE-SU-2026:4000-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3999-1 4 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763). …
first Sep 7, 2026 -
Medium max 6.8SUSE-SU-2026:3998-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777)…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3997-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:3996-1 1 CVE
Security update for gegl
This update for gegl fixes the following issue: - CVE-2026-18300: integer overflow in HDR file parsing can allow undersized buffer allocations (bsc#1276229).
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3995-1 6 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134). - CVE-2026-15167: Denial of S…
first Sep 7, 2026 -
High max 7.5SUSE-SU-2026:3994-1 10 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134). - CVE-2026-15166: Denial of S…
first Sep 7, 2026 -
High max 7.8SUSE-SU-2026:3993-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - code execution upon opening arbitrary file (bsc#1275941). - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader (bsc#1276264). - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#127…
first Sep 7, 2026 -
High max 7.2SUSE-SU-2026:3992-1 3 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…
first Sep 7, 2026 -
High max 7.1SUSE-SU-2026:3991-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).
first Sep 7, 2026