35,560 results · Feed
-
High max 7.5SUSE-SU-2026:23246-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.611.g7d90691. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 19, 2026 -
High max 8.8SUSE-SU-2026:23245-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_pass…
first Aug 19, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert "s…
first Aug 18, 2026 -
UnscoredSUSE-SU-2026:23243-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_28
This update for kernel-livepatch-MICRO-6-0_Update_28 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 28.
first Aug 18, 2026 -
UnscoredSUSE-SU-2026:23242-1 0 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_28
This update for kernel-livepatch-MICRO-6-0-RT_Update_28 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 28.
first Aug 18, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert…
first Aug 18, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …
first Aug 11, 2026 -
High max 8.7SUSE-SU-2026:23236-1 7 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwra…
first Aug 13, 2026 -
High max 8.5SUSE-SU-2026:23235-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
Low max 3.3SUSE-SU-2026:23234-1 1 CVE
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF …
first Aug 12, 2026 -
Medium max 5.1SUSE-SU-2026:23233-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 2.3.14+git0.e23b4c54. Security issues fixed: - CVE-2026-45784: incorrect sizing of output buffers in `CipherCtxRef::cipher_update_inplace` when used with AES key-wrap-with-padding cipher…
first Aug 12, 2026 -
High max 8.8SUSE-SU-2026:23232-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …
first Aug 11, 2026 -
High max 7.5SUSE-SU-2026:23229-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:23228-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
Critical max 9.6SUSE-SU-2026:23227-1 77 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w * GO-2…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23226-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23225-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
UnscoredSUSE-SU-2026:23224-1 0 CVEs
Security update for gd
This update for gd fixes the following issue: - CVE-2026-9672: security issue in `libgd` (bsc#1273101).
first Aug 10, 2026 -
High max 8.5SUSE-SU-2026:23223-1 2 CVEs
Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…
first Aug 14, 2026 -
High max 8.8SUSE-SU-2026:23222-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …
first Aug 11, 2026 -
High max 7.5SUSE-SU-2026:23218-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
High max 8.7SUSE-SU-2026:23217-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
Critical max 9.6SUSE-SU-2026:23216-1 77 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w * GO-2…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23215-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8SUSE-SU-2026:23214-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
UnscoredSUSE-SU-2026:23213-1 0 CVEs
Security update for gd
This update for gd fixes the following issue: - CVE-2026-9672: security issue in `libgd` (bsc#1273101).
first Aug 10, 2026 -
Critical max 9.8SUSE-SU-2026:2641-1 11 CVEs
Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 (jsc#PED-16334): Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#12…
-
Low max 2.0openSUSE-SU-2026:21664-1 1 CVE
Security update for pyenv
This update for pyenv fixes the following issues: Changes in pyenv: - CVE-2026-68939: a matching attacker-controlled file can silently select a different installed interpreter or version (bsc#1275661)
first Aug 26, 2026 -
Critical max 9.6openSUSE-SU-2026:21663-1 5 CVEs
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.98.0: * chore: fix extra whitespace * Default Codespaces port forwarding to loopback * Bump gh-aw-actions to v0.87.1 and recompile workflows * Fix issue triage action compatib…
first Aug 26, 2026 -
Critical max 10.0openSUSE-SU-2026:21662-1 24 CVEs
Security update for glab
This update for glab fixes the following issues: Changes in glab: - Update to version 1.114.0: * feat(api): support dynamic custom headers for authenticating proxies * feat(artifact-registry): add glab artifact-registry login --docker * feat(artifact-registry…
first Aug 26, 2026 -
Critical max 9.1openSUSE-SU-2026:21650-1 41 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). …
first Aug 26, 2026 -
Medium max 5.3openSUSE-SU-2026:11609-1 1 CVE
distribution-registry-3.1.1-5.1 on GA media
These are all security issues fixed in the distribution-registry-3.1.1-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
Medium max 5.3openSUSE-SU-2026:11608-1 1 CVE
coredns-1.14.7-1.1 on GA media
These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
Medium max 6.9openSUSE-SU-2026:11607-1 1 CVE
cloudflared-2026.8.2-1.1 on GA media
These are all security issues fixed in the cloudflared-2026.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
Critical max 9.8openSUSE-SU-2026:11615-1 3 CVEs
python313-GitPython-3.1.59-3.1 on GA media
These are all security issues fixed in the python313-GitPython-3.1.59-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 7.5openSUSE-SU-2026:11614-1 1 CVE
python313-Authlib-1.7.2-3.1 on GA media
These are all security issues fixed in the python313-Authlib-1.7.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
Low max 2.0openSUSE-SU-2026:11613-1 1 CVE
pyenv-2.8.4-1.1 on GA media
These are all security issues fixed in the pyenv-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026 -
High max 7.1openSUSE-SU-2026:11612-1 16 CVEs
libIex-3_4-33-3.4.14-1.1 on GA media
These are all security issues fixed in the libIex-3_4-33-3.4.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 26, 2026