35,560 results · Feed
-
Critical max 9.1SUSE-SU-2026:3855-1 17 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP client proxy tunnel headers …
first Aug 28, 2026 -
UnscoredSUSE-SU-2026:3854-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Aug 28, 2026 -
UnscoredSUSE-SU-2026:3853-1 0 CVEs
Security update for podman
This update for podman rebuilds it against the current go security release.
first Aug 28, 2026 -
UnscoredSUSE-SU-2026:3852-1 0 CVEs
Security update for rekor
This update for rekor rebuilds it against the current go security release.
first Aug 28, 2026 -
Medium max 6.9SUSE-SU-2026:3851-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821).
first Aug 28, 2026 -
Medium max 5.6SUSE-SU-2026:3846-1 1 CVE
Security update for python36-pip
This update for python36-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).
first Aug 27, 2026 -
UnscoredSUSE-SU-2026:3843-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC…
first Aug 27, 2026 -
Medium max 5.4SUSE-SU-2026:3842-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…
first Aug 27, 2026 -
Medium max 5.4SUSE-SU-2026:3841-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…
first Aug 27, 2026 -
High max 8.8SUSE-SU-2026:3840-1 3 CVEs
Security update for wicked
This update for wicked fixes the following issues: Update to version 0.6.79. - CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to `/run/wicked/leaseinfo.*` files (bsc#1265221). - CVE-2026-71401:…
first Aug 27, 2026 -
Medium max 5.4SUSE-SU-2026:3839-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…
first Aug 27, 2026 -
Medium max 5.4SUSE-SU-2026:3837-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…
first Aug 27, 2026 -
Medium max 6.8SUSE-SU-2026:3834-1 1 CVE
Security update for librest0_7
This update for librest0_7 fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).
first Aug 27, 2026 -
High max 7.5SUSE-SU-2026:23297-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only UR…
first Aug 27, 2026 -
Critical max 9.8SUSE-SU-2026:23293-1 24 CVEs
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23296-1 24 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23295-1 12 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpol…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23292-1 23 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23291-1 23 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23290-1 23 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23288-1 23 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23286-1 20 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23285-1 20 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23283-1 19 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23282-1 19 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23281-1 15 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23280-1 15 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…
first Aug 26, 2026 -
Critical max 9.8SUSE-SU-2026:23279-1 6 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53224: s…
first Aug 26, 2026 -
Medium max 5.4openSUSE-SU-2026:11671-1 1 CVE
bson-devel-2.5.1-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11665-1 29 CVEs
ffmpeg-7-7.1.5-2.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11676-1 4 CVEs
trivy-0.74.0-2.1 on GA media
These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Medium max 5.4openSUSE-SU-2026:11675-1 2 CVEs
python313-aiosmtpd-1.4.6-6.1 on GA media
These are all security issues fixed in the python313-aiosmtpd-1.4.6-6.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11673-1 3 CVEs
opencode-1.18.26-1.1 on GA media
These are all security issues fixed in the opencode-1.18.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11669-1 1 CVE
helm3-3.21.3-7.1 on GA media
These are all security issues fixed in the helm3-3.21.3-7.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Medium max 5.3openSUSE-SU-2026:11668-1 1 CVE
helm-4.2.4-1.1 on GA media
These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 10.0openSUSE-SU-2026:11666-1 24 CVEs
firefox-esr-153.2.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
High max 8.8openSUSE-SU-2026:11674-1 6 CVEs
glances-common-4.5.6-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Medium max 5.3openSUSE-SU-2026:11672-1 1 CVE
libmsgpack-c2-7.0.2-2.1 on GA media
These are all security issues fixed in the libmsgpack-c2-7.0.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Medium max 6.8openSUSE-SU-2026:11670-1 2 CVEs
mcphost-0.34.0-10.1 on GA media
These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026 -
Critical max 9.8openSUSE-SU-2026:11667-1 2 CVEs
hauler-2.1.0-1.1 on GA media
These are all security issues fixed in the hauler-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 2, 2026