35,560 results · Feed
-
Critical max 9.8SUSE-SU-2026:23330-1 15 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23329-1 15 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
High max 8.7SUSE-SU-2026:23327-1 7 CVEs
Security update for snphost
This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…
first Aug 24, 2026 -
High max 7.5SUSE-SU-2026:23326-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only UR…
first Aug 27, 2026 -
Critical max 9.1SUSE-SU-2026:23323-1 41 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). …
first Aug 26, 2026 -
High max 7.5SUSE-SU-2026:23321-1 10 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 3.1 (bsc#1274715). Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398). - CVE-2026-26962: rack:…
first Aug 25, 2026 -
High max 8.7SUSE-SU-2026:23320-1 4 CVEs
Security update for libheif
This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…
first Aug 25, 2026 -
Medium max 5.6SUSE-SU-2026:23319-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 25, 2026 -
Medium max 5.7SUSE-SU-2026:23312-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004). - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). -…
first Aug 24, 2026 -
Critical max 9.6SUSE-SU-2026:23300-1 9 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.13 (released 2026-08-13, bsc#1244485). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive st…
first Aug 19, 2026 -
High max 7.0SUSE-SU-2026:23317-1 1 CVE
Security update for 7zip
This update for 7zip fixes the following issue: Update to 26.02. - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remote code execution (bsc#1273065).
first Aug 25, 2026 -
High max 8.8SUSE-SU-2026:23316-1 6 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…
first Aug 24, 2026 -
High max 7.5SUSE-SU-2026:23314-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 24, 2026 -
High max 8.2SUSE-SU-2026:23311-1 1 CVE
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
first Aug 24, 2026 -
UnscoredSUSE-SU-2026:23309-1 0 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory (bsc#1254340) - Fix out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (bsc#1254341) - Fix buffer overrun in archive_le32dec when reading trunc…
first Aug 24, 2026 -
Medium max 6.5SUSE-SU-2026:23308-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).
first Aug 24, 2026 -
Critical max 9.8SUSE-SU-2026:23304-1 31 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 (bsc#1274867) * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component * CVE-2026-74935: Privilege escalati…
first Aug 19, 2026 -
High max 8.7SUSE-SU-2026:23303-1 8 CVEs
Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…
first Aug 19, 2026 -
Critical max 9.6SUSE-SU-2026:23301-1 9 CVEs
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 (released 2026-08-13, bsc#1255111). Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive str…
first Aug 19, 2026 -
Critical max 9.1SUSE-SU-2026:3835-1 4 CVEs
Security update for openssl, openssl-3
This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: (jsc#PED-16072) * Enables Post-Quantum Cryptography (PQC) TLS support Security issues fixed: * CVE-2026-42764: NULL pointer dereference in QUIC server in…
-
High max 7.5openSUSE-SU-2026:21816-1 4 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 (bsc#1265425, CVE-2026-41888, bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, ).
first Sep 9, 2026 -
Medium max 5.4openSUSE-SU-2026:21795-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests (bsc#1275231)
first Sep 3, 2026 -
Medium max 5.5openSUSE-SU-2026:21794-1 1 CVE
Security update for supergfxctl
This update for supergfxctl fixes the following issues: Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' (CVE-2026-25541 boo#1274336) - Update to version 1762634235.5d503b1: * Added GfxMode::Integrated, GfxMode::Hybrid to the Asus…
first Sep 3, 2026 -
Critical max 9.8openSUSE-SU-2026:21793-1 6 CVEs
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.0 (bsc#1265425, CVE-2026-41888): * `v2.1.0` is a **minor** release built on the containerd- native foundation laid down in `v2.0.0`. The headline is that `hauler store sync`…
first Sep 3, 2026 -
Low max 3.1openSUSE-SU-2026:21789-1 1 CVE
Security update for python-apprise
This update for python-apprise fixes the following issues: Changes in python-apprise: - CVE-2026-59180: Information disclosure via HTTP redirect following with credential resending (bsc#1271342)
first Sep 2, 2026 -
Critical max 9.9openSUSE-SU-2026:21788-1 9 CVEs
Security update for lxd
This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: * bsc#1274937, CVE-2026-63293, bsc#1274936, CVE-2026-62420, bsc#1274954, CVE-2026-63295, bsc#1274963, CVE-2026-63297, bsc#1274961, CVE-2026-63296, bsc#1275085, CVE-2026-63299,…
first Sep 2, 2026 -
Medium max 5.3openSUSE-SU-2026:21787-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update go.opentelemetry.io/otel to 1.44.0 to fix CVE-2026-41178: It caused 'Parse' to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized in…
first Sep 2, 2026 -
Critical max 9.6openSUSE-SU-2026:21786-1 2 CVEs
Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor: * go.opentelemetry.io/otel@v1.44.0 (bsc#1276727, CVE-2026-41178) - update to 0.60.5 (bsc#1266645, CVE-2026-39821): * build: discover bootstrap image tag instead of pinn…
first Sep 2, 2026 -
High max 7.7openSUSE-SU-2026:21778-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).
first Sep 6, 2026 -
Medium max 5.1openSUSE-SU-2026:21777-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 6, 2026 -
High max 7.1openSUSE-SU-2026:21776-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Ent…
first Sep 6, 2026 -
Critical max 9.1openSUSE-SU-2026:21774-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-20…
first Sep 6, 2026 -
Medium max 6.5openSUSE-SU-2026:21773-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 6, 2026 -
Medium max 6.8openSUSE-SU-2026:21771-1 2 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276612). - CVE-2026-81092: github.com/mark3labs/mcp-go/serv…
first Sep 6, 2026 -
Medium max 5.3openSUSE-SU-2026:21768-1 1 CVE
Security update for msgpack-c
This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation (bsc#1275911).
first Sep 6, 2026 -
Medium max 6.5openSUSE-SU-2026:21765-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 4.8openSUSE-SU-2026:21762-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Critical max 10.0openSUSE-SU-2026:21761-1 181 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260827T195228 2026-08-27T19:52:28Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5026 CVE-2026-39821 * GO-2026-6225 * GO-2026-6…
first Sep 4, 2026 -
Medium max 6.8openSUSE-SU-2026:21759-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS s…
first Sep 4, 2026 -
Medium max 4.0openSUSE-SU-2026:21758-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).
first Sep 4, 2026