35,581 results · Feed
-
Critical max 9.6SUSE-SU-2026:23077-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/tex…
first Aug 3, 2026 -
Medium max 5.1openSUSE-SU-2026:21573-1 1 CVE
Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 2.3.14+git0.e23b4c54. Security issues fixed: - CVE-2026-45784: incorrect sizing of output buffers in `CipherCtxRef::cipher_update_inplace` when used with AES key-wrap-with-padding cipher…
first Aug 12, 2026 -
High max 8.8openSUSE-SU-2026:21572-1 6 CVEs
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Ac…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:23155-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5SUSE-SU-2026:23154-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
Critical max 9.0SUSE-SU-2026:23152-1 11 CVEs
Security update for samba
This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the `user.SmbReparse` xattr (bsc#1261188). - CVE-2026-2340: WORM …
first Aug 6, 2026 -
Critical max 9.3SUSE-SU-2026:23150-1 32 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700). - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths…
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:23147-1 16 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…
first Aug 5, 2026 -
Medium max 5.3SUSE-SU-2026:23146-1 7 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.html#change-1.9.15 - https://www.dnsdist.org/changelog.html#change-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output pr…
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:23145-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:23144-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…
first Aug 5, 2026 -
Critical max 9.8SUSE-SU-2026:23137-1 61 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 (bsc#1271649): * CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component * CVE-2026-15719: Site isolation iss…
first Aug 3, 2026 -
High max 7.9SUSE-SU-2026:23134-1 1 CVE
Security update for python-sh
This update for python-sh fixes the following issue - CVE-2026-54552: `_uid` option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation (bsc#1272424).
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:23133-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Aug 1, 2026 -
Medium max 6.4SUSE-SU-2026:23132-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
Critical max 9.0SUSE-SU-2026:23129-1 11 CVEs
Security update for samba
This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the `user.SmbReparse` xattr (bsc#1261188). - CVE-2026-2340: WORM …
first Aug 6, 2026 -
Critical max 9.3SUSE-SU-2026:23127-1 32 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700). - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths…
first Aug 6, 2026 -
Medium max 5.3SUSE-SU-2026:23123-1 7 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.html#change-1.9.15 - https://www.dnsdist.org/changelog.html#change-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output pr…
first Aug 5, 2026 -
High max 8.1SUSE-SU-2026:23121-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…
first Aug 5, 2026 -
Critical max 9.8SUSE-SU-2026:23115-1 61 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 (bsc#1271649): * CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component * CVE-2026-15719: Site isolation iss…
first Aug 3, 2026 -
High max 8.7SUSE-SU-2026:23114-1 1 CVE
Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump() can lead to memory leaks (bsc#1270301).
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:23111-1 23 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…
first Aug 1, 2026 -
Medium max 6.4SUSE-SU-2026:23110-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Jul 31, 2026 -
Medium max 5.1SUSE-SU-2026:23109-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` allows a compromised SPICE host to crash the `spice-vdagent` daemon via a specially crafted message that triggers a heap buffer overflow (bsc#12695…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23108-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23106-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23105-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23104-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23103-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23102-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23101-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23099-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23097-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23096-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23095-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23093-1 6 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23090-1 6 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23089-1 6 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23088-1 6 CVEs
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026