35,581 results · Feed
-
Critical max 9.8SUSE-SU-2026:3697-1 21 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …
first Aug 22, 2026 -
Critical max 9.8SUSE-SU-2026:3696-1 20 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …
first Aug 22, 2026 -
Critical max 9.8SUSE-SU-2026:3694-1 18 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …
first Aug 22, 2026 -
Critical max 9.8SUSE-SU-2026:3689-1 22 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.13 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …
first Aug 22, 2026 -
High max 7.6SUSE-SU-2026:3687-1 3 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…
first Aug 21, 2026 -
High max 8.4SUSE-SU-2026:3688-1 2 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-59088: GIMP: Denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (bsc#1274840).
first Aug 21, 2026 -
High max 7.6SUSE-SU-2026:3686-1 3 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…
first Aug 21, 2026 -
High max 7.0SUSE-SU-2026:3685-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
High max 7.0SUSE-SU-2026:3684-1 5 CVEs
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …
first Aug 21, 2026 -
Critical max 10.0SUSE-SU-2026:3683-1 58 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 (bsc#1274867): - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escala…
first Aug 21, 2026 -
High max 8.6SUSE-SU-2026:3680-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…
first Aug 21, 2026 -
High max 8.6SUSE-SU-2026:3677-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…
first Aug 21, 2026 -
Critical max 9.1SUSE-SU-2026:23212-1 13 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP clie…
first Aug 18, 2026 -
UnscoredSUSE-SU-2026:23211-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Build against outdated `go1.24-openssl` (bsc#1268900). Changes for suseconnect-ng: - Update version to 1.23.0: - Use product identifier for product migrations (bsc#1268596). - Switch to using `go1.26…
first Aug 18, 2026 -
Medium max 4.6SUSE-SU-2026:23210-1 3 CVEs
Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…
first Aug 18, 2026 -
High max 7.5SUSE-SU-2026:23205-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#…
first Aug 17, 2026 -
Medium max 5.5SUSE-SU-2026:23204-1 1 CVE
Security update for rpm
This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).
first Aug 17, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert "s…
first Aug 18, 2026 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert…
first Aug 18, 2026 -
Medium max 5.5SUSE-SU-2026:23192-1 1 CVE
Security update for rpm
This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).
first Aug 18, 2026 -
Critical max 9.1SUSE-SU-2026:23191-1 13 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP clie…
first Aug 18, 2026 -
High max 8.6SUSE-SU-2026:23190-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash …
first Aug 18, 2026 -
High max 8.6SUSE-SU-2026:23188-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
first Aug 17, 2026 -
High max 8.8SUSE-SU-2026:23187-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 17, 2026 -
UnscoredSUSE-SU-2026:23186-1 0 CVEs
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Build against outdated `go1.24-openssl` (bsc#1268900). Changes for suseconnect-ng: - Update version to 1.23.0: - Use product identifier for product migrations (bsc#1268596). - Switch to using `go1.26…
first Aug 17, 2026 -
UnscoredSUSE-SU-2026:3784-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current go security release.
first Aug 25, 2026 -
UnscoredSUSE-SU-2026:3783-1 0 CVEs
Security update for containerd
This update for containerd rebuilds it against the current go security release.
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3781-1 6 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3780-1 9 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3779-1 13 CVEs
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3778-1 11 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3777-1 12 CVEs
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3776-1 15 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3775-1 17 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3774-1 18 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 25, 2026 -
Medium max 6.8openSUSE-SU-2026:11594-1 3 CVEs
java-11-openjdk-11.0.32.1-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 25, 2026 -
Critical max 9.8SUSE-SU-2026:3757-1 13 CVEs
Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…
first Aug 24, 2026 -
Critical max 9.8SUSE-SU-2026:3754-1 22 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…
first Aug 24, 2026 -
Critical max 9.8SUSE-SU-2026:3746-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …
first Aug 24, 2026 -
High max 7.2openSUSE-SU-2026:11599-1 8 CVEs
ucode-intel-20260812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 25, 2026