35,560 results · Feed
-
Critical max 9.1SUSE-SU-2026:3938-1 6 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input (bsc#1207866). - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion c…
first Sep 3, 2026 -
Critical max 9.1SUSE-SU-2026:3937-1 6 CVEs
Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input (bsc#1207866). - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion c…
first Sep 3, 2026 -
High max 8.2SUSE-SU-2026:3936-1 4 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). Changes for libsoup2: - tld-test: update after changes in the public suffix list: '*.bd' is no longe…
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3932-1 1 CVE
Security update for python-msgpack
This update for python-msgpack fixes the following issue: - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).
first Sep 3, 2026 -
High max 7.5SUSE-SU-2026:3931-1 2 CVEs
Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580). C…
first Sep 3, 2026 -
High max 7.7SUSE-SU-2026:3930-1 35 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - CVE-2025-22150: undici: predictable random values used when defining the boundary for a `multipart`/`form-data` request (bsc#1236258). - CVE-2026-6733: undici: response queue poisoning on reused keep-aliv…
first Sep 3, 2026 -
Medium max 6.6SUSE-SU-2026:3924-1 1 CVE
Security update for texlive
This update for texlive fixes the following issue: - CVE-2026-63729: heap use-after-free in the SyncTeX parser can lead to application crash or arbitrary code execution when malformed `.synctex` or `.synctex.gz` files are processed(bsc#1272432).
first Sep 2, 2026 -
High max 8.8SUSE-SU-2026:3914-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Sep 1, 2026 -
High max 8.7SUSE-SU-2026:3907-1 4 CVEs
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893:…
first Sep 1, 2026 -
Critical max 9.1SUSE-SU-2026:3905-1 4 CVEs
Security update for libapr-util1
This update for libapr-util1 fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850…
first Sep 1, 2026 -
High max 8.8SUSE-SU-2026:3895-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 8.8SUSE-SU-2026:3894-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.4.6. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 8.8SUSE-SU-2026:3893-1 1 CVE
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 3.3.22. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3890-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3889-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3888-1 1 CVE
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: - CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) during interactive domain join (bsc#1272776).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3884-1 17 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-40691: DoS due to heap overflow via single bad DNSCrypt query over TCP (bsc#1271875). - CVE-2026-42955: Ghost domain window can be extended by up t…
first Aug 31, 2026 -
Medium max 5.3SUSE-SU-2026:3883-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3882-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2026-41178: `go.opentelemetry.io/otel/baggage`,`go.opentelemetry.io/otel/propagation`: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). - CVE-2026-6…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3878-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). Changes for openssl-1_1: - Augu…
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3877-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). Changes for openssl-1_1: - Augu…
first Aug 31, 2026 -
Critical max 9.1SUSE-SU-2026:3876-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788). - CVE-2026-63074: CMP Indefinite …
first Aug 31, 2026 -
High max 7.5SUSE-SU-2026:3872-1 2 CVEs
Security update for libcares2
This update for libcares2 fixes the following issues: - CVE-2026-33630: Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP (bsc#1270416). - CVE-2026-69184: CPU-exhaustion denial of service vi…
first Aug 28, 2026 -
UnscoredSUSE-SU-2026:3870-1 0 CVEs
Security update for python312
This update for python312 fixes the following issues: - Regression in `http.cookies` (bsc#1263083).
first Aug 28, 2026 -
High max 7.0SUSE-SU-2026:3869-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065). Changes for 7zip: - Updated to 26.02.
first Aug 28, 2026 -
Medium max 6.5SUSE-SU-2026:3868-1 1 CVE
Security update for quagga
This update for quagga fixes the following issue: - CVE-2026-37458: missing input validation in the `MP_REACH_NLRI` component allows authenticated attackers to cause a DoS via a crafted UPDATE message (bsc#1263974).
first Aug 28, 2026 -
UnscoredSUSE-SU-2026:3867-1 0 CVEs
Security update for rsyslog
This update for rsyslog fixes the following issue: - Heap buffer overflow in the core `RainerScript` `replace()` function (bsc#1275926).
first Aug 28, 2026 -
Critical max 9.1SUSE-SU-2026:3866-1 5 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release . - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). - CVE-…
first Aug 28, 2026 -
Critical max 10.0SUSE-SU-2026:23411-1 115 CVEs
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. * Fixed: Various security fixes. MFSA 2026-77 (bsc#1274867): * CVE-2026-74934 Site is…
first Aug 31, 2026 -
UnscoredSUSE-SU-2026:23407-1 0 CVEs
Security update for libgpg-error
This update for libgpg-error fixes the following issue: - Out-of-bounds read in `_gpgrt_vfnameconcat` of `stringutils.c` when the `GPGRT_FCONCAT_SYSCONF` flag is used (bsc#1263078).
first Aug 31, 2026 -
High max 7.8SUSE-SU-2026:23405-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the `as-user` option in the `org.freedesktop.UDisks2.Filesystem.Mount()` D-Bus method can lead to local privilege escalation (bsc#1274430).
first Aug 30, 2026 -
High max 8.7SUSE-SU-2026:23404-1 3 CVEs
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS#7 `EnvelopedData` decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (bsc#1273551). - CVE-2026-69248: verifier accepts wildcard DNS names …
first Aug 30, 2026 -
High max 8.6SUSE-SU-2026:23393-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
Medium max 6.9SUSE-SU-2026:23392-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).
first Aug 27, 2026 -
High max 8.6SUSE-SU-2026:23391-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…
first Aug 28, 2026 -
Critical max 9.8SUSE-SU-2026:23390-1 19 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23389-1 20 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23388-1 21 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23387-1 21 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026 -
Critical max 9.8SUSE-SU-2026:23386-1 22 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: …
first Aug 31, 2026