35,560 results · Feed
-
High max 8.0SUSE-SU-2026:3945-1 1 CVE
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 3.2.20. - CVE-2026-59680: OS command injection via LDAP-supplied `shadowLastChange`/`shadowExpire` attribute (bsc#1272839).
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3943-1 25 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3942-1 28 CVEs
Security update for postgresql18
This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3934-1 6 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2026-64833: out-of-bounds read in the S/PDIF muxer via a crafted DTS stream with a `core_size` value larger than the actual packet length (bsc#1272755). - CVE-2026-64834: infinite loop in the RTP/ASF de…
first Sep 3, 2026 -
High max 7.7SUSE-SU-2026:3929-1 35 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - CVE-2025-22150: undici: predictable random values used when defining the boundary for a `multipart`/`form-data` request (bsc#1236258). - CVE-2026-6733: undici: response queue poisoning on reused keep-aliv…
first Sep 3, 2026 -
Medium max 5.3SUSE-SU-2026:3928-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276731).
first Sep 3, 2026 -
Medium max 4.8SUSE-SU-2026:3925-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 2, 2026 -
Medium max 6.7SUSE-SU-2026:3921-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issue: - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
first Sep 2, 2026 -
High max 7.5SUSE-SU-2026:3918-1 2 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop (bsc#1273145). - CVE-2026-64612: authentica…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:3916-1 3 CVEs
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…
first Sep 1, 2026 -
High max 7.5SUSE-SU-2026:3915-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:3901-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
Medium max 5.5SUSE-SU-2026:3899-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-68742: unvalidated address lengths in NSS responder packet parsing can cause a heap out-of-bounds read (bsc#1273922). - CVE-2026-68743: oversized length parameters in authentication requests can caus…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3898-1 1 CVE
Security update for python-httplib2
This update for python-httplib2 fixes the following issue: - CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with `Content-Encoding: gzip` or `deflate` can lead to OOM-kill in the client process when it connects to a compromised HTTP s…
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:3897-1 31 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. - MFSA 2026-79 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalation in the DOM: N…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3886-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23383-1 22 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23371-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23338-1 23 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8openSUSE-SU-2026:21811-1 12 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
Medium max 5.1SUSE-SU-2026:3933-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Sep 3, 2026 -
Critical max 9.1SUSE-SU-2026:3919-1 14 CVEs
Security update for dovecot22
This update for dovecot22 fixes the following issues: Security issues fixed: - CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799). - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after bare carriage return (bsc#1276802). - CVE-2026-33…
first Sep 2, 2026 -
High max 8.7SUSE-SU-2026:3906-1 4 CVEs
Security update for python3-sqlparse
This update for python3-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893…
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:23400-1 4 CVEs
Security update for dhcpcd
This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service (bsc#1268980). - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte sta…
first Aug 30, 2026 -
Critical max 9.8SUSE-SU-2026:23384-1 22 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23369-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23332-1 19 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23328-1 6 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53224: s…
first Aug 26, 2026 -
Critical max 9.4SUSE-SU-2026:23305-1 1 CVE
Security update for qt6-svg
This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing `pattern` group nodes (bsc#1250994).
first Aug 24, 2026 -
Medium max 5.5openSUSE-SU-2026:21815-1 1 CVE
Security update for waylyrics
This update for waylyrics fixes the following issues: Changes in waylyrics: - Update to version 0.4.0 (CVE-2026-25541 bsc#1274106) * Added plugin architecture and SakuraLLM translation plugin * Added OpenCC support for Simplified/Traditional Chinese * Added s…
first Sep 8, 2026 -
High max 7.5openSUSE-SU-2026:21814-1 3 CVEs
Security update for zk
This update for zk fixes the following issues: Changes in zk: - Update Go vendored dependencies to resolve security issues (boo#1278625, boo#1278447): * Upgrade golang.org/x/crypto to v0.56.0 to fix security vulnerabilities in the embedded x/crypto/ssh packag…
first Sep 8, 2026 -
Critical max 9.6openSUSE-SU-2026:21812-1 39 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv * GO-2…
first Sep 8, 2026 -
Critical max 9.8openSUSE-SU-2026:21810-1 12 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: HTTP/2 no-autho…
first Sep 8, 2026 -
UnscoredopenSUSE-SU-2026:21802-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (bsc#1277205). - Path traversal in device-mapper-multipath failed_wwids management (bsc#1277210). - SCSI PRIN READ FULL STATU…
first Sep 7, 2026 -
Medium max 6.9
sshamble-0.3.12-1.1 on GA media
These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.8openSUSE-SU-2026:11736-1 1 CVE
python313-modelscope-1.40.0-1.1 on GA media
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.7openSUSE-SU-2026:11732-1 5 CVEs
containerized-data-importer1.66-api-1.66.1-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2026 -
High max 8.8SUSE-SU-2026:3941-1 24 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 8.8SUSE-SU-2026:3940-1 24 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…
first Sep 3, 2026 -
High max 7.8SUSE-SU-2026:3939-1 5 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages (bsc#1275863) - CVE-2026-63622: util: virFileChownFiles: do not follow symlinks (bsc#1275264) - CVE-2026-63623: storage: …
first Sep 3, 2026