35,526 results · Feed
-
High max 7.5SUSE-SU-2026:24467-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: panic in `BorrowedCertRevocationList::from_der` via empty `BIT STRING` in `IssuingDistributionPoint` (bsc#1282250). - CVE-2026-93600: rustls-webpki: name const…
first Oct 27, 2026 -
High max 7.0SUSE-SU-2026:24466-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
first Oct 27, 2026 -
High max 8.8SUSE-SU-2026:24464-1 1 CVE
Security update for ansible-core
This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the con…
first Oct 26, 2026 -
High max 7.8SUSE-SU-2026:24462-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).
first Oct 26, 2026 -
Critical max 9.2SUSE-SU-2026:24461-1 14 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.86: - CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). - CVE-2026-17508: unbounded KDF iteration and memory parameters …
first Oct 26, 2026 -
High max 8.7openSUSE-SU-2026:22228-1 1 CVE
Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to address: * bsc#1288460, CVE-2026-116591, github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22226-1 10 CVEs
Security update for perl-MIME-tools
This update for perl-MIME-tools fixes the following issues: Changes in perl-MIME-tools: - updated to 5.522.0 (5.522) * 5.522 * VERSION 5.522 RELEASED * Many security issues were addressed (see the following ten CVEs) Issues were brought to my attention, and p…
first Nov 3, 2026 -
Medium max 6.6SUSE-SU-2026:5090-1 2 CVEs
Security update for parted
This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).
first Nov 3, 2026 -
High max 8.1SUSE-SU-2026:5089-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:5088-1 5 CVEs
Security update for the Linux Kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.328 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_optio…
first Nov 3, 2026 -
Medium max 4.4SUSE-SU-2026:5087-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: Security issue fixed: - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: - Xen: Missing upstream bug fixes (bsc#1027519).
first Nov 3, 2026 -
High max 8.7openSUSE-SU-2026:22227-1 3 CVEs
Security update for go-containerregistry
This update for go-containerregistry fixes the following issues: Changes in go-containerregistry: - update vendor.tar to address: * bsc#1288488, CVE-2026-116591: github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the s…
first Nov 3, 2026 -
Critical max 9.6openSUSE-SU-2026:22224-1 6 CVEs
Security update for rqlite
This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.6.6: * Keep the local auto-backup file if the metadata rename fails * Reject local auto-backup filenames reserved for internal use * POST /demote and POST /promote re…
first Nov 3, 2026 -
High max 7.5openSUSE-SU-2026:22222-1 1 CVE
Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.103.3: * fix(gh auth status): only diagnose token expiry after HTTP 401 * fix(gh auth status): explain expired expiring tokens with --no-refresh - Update to version 2.103.2: *…
first Nov 3, 2026 -
Critical max 10.0SUSE-SU-2026:5091-1 1077 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix O…
first Nov 3, 2026 -
Critical max 9.8SUSE-SU-2026:5086-1 7 CVEs
Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). - CVE-2026-74469: sctp…
-
Critical max 9.8SUSE-SU-2026:5084-1 4 CVEs
Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89551: SUNRPC: xdr_buf_trim…
-
Critical max 9.8SUSE-SU-2026:5085-1 5 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_op…
-
High max 7.0SUSE-SU-2026:5080-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
-
Medium max 6.8SUSE-SU-2026:5079-1 19 CVEs
Security update for sssd
This update for sssd fixes the following issues: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807). - CVE-2026-68742: unvalidated address lengths in NSS respon…
-
Critical max 9.8SUSE-SU-2026:5075-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
UnscoredSUSE-SU-2026:5074-1 0 CVEs
Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release.
-
Critical max 9.1SUSE-SU-2026:5073-1 6 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). - CVE-2026-74049: Jasper JSTL <c:redirect> plug-in implementation omits page abort (bsc#1286555). - CVE-2026-88041: I…
-
Critical max 9.8SUSE-SU-2026:5069-1 31 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-…
-
High max 7.5SUSE-SU-2026:5067-1 3 CVEs
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253611). - CVE-2025-47914:…
-
High max 7.5SUSE-SU-2026:5066-1 4 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: Denial of service via panic on malformed CRL BIT STRING (bsc#1282250). - CVE-2026-93600: rustls-webpki: URI name constraint bypass in X.509 certificates (bsc#1…
-
High max 7.0SUSE-SU-2026:5065-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issue: - CVE-2026-88924: `gvfs-admin` socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).
-
Medium max 5.3SUSE-SU-2026:5062-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
-
High max 8.2SUSE-SU-2026:5061-1 1 CVE
Security update for guava, j2objc-annotations
This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc…
-
Critical max 9.8SUSE-SU-2026:5058-1 9 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in ne…
-
High max 8.1SUSE-SU-2026:5082-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). …
-
Medium max 4.3SUSE-SU-2026:5078-1 2 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticate…
-
Critical max 9.8SUSE-SU-2026:5077-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
Critical max 9.8SUSE-SU-2026:5076-1 18 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…
-
Critical max 9.8SUSE-SU-2026:5068-1 31 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-…
-
Critical max 9.1SUSE-SU-2026:5064-1 8 CVEs
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…
-
Medium max 5.3SUSE-SU-2026:5063-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
-
Critical max 9.8SUSE-SU-2026:5059-1 10 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…
-
Critical max 9.8SUSE-SU-2026:5053-1 11 CVEs
Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite l…
-
Critical max 9.8SUSE-SU-2026:5052-1 8 CVEs
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev …