35,581 results · Feed
-
Critical max 9.8SUSE-SU-2026:23087-1 6 CVEs
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23086-1 6 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23085-1 6 CVEs
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23083-1 6 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23081-1 2 CVEs
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:23080-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: acc…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
Low max 2.5SUSE-SU-2026:23076-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
first Aug 3, 2026 -
Critical max 9.1SUSE-SU-2026:23075-1 5 CVEs
Security update for perl
This update for perl fixes the following issues - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date (bsc#1266361). - CVE-2026-8376: heap buffer overflow when compiling regular expressions with …
first Jul 31, 2026 -
Medium max 6.5SUSE-SU-2026:23074-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issue Update freetype2 and ft2demos to version 2.14.3. - CVE-2026-50811: out-of-bounds read in `src/truetype/ttgxvar.c` in the `TT_Get_Var_Design` implementation used by `FT_Get_Var_Design_Coordinates` (bsc#127104…
first Jul 31, 2026 -
Critical max 9.6SUSE-SU-2026:23073-1 2 CVEs
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/…
first Jul 31, 2026 -
Medium max 6.5SUSE-SU-2026:23072-1 2 CVEs
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2025-24912: RADIUS pending request dropping (bsc#1239461). - CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing all…
first Jul 31, 2026 -
High max 8.7SUSE-SU-2026:23071-1 13 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270175). - CVE-2026-4167…
first Jul 30, 2026 -
High max 8.7SUSE-SU-2026:23070-1 8 CVEs
Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429). - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:de…
first Jul 30, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet…
first Aug 13, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet…
first Aug 13, 2026 -
High max 8.1SUSE-SU-2026:3615-1 14 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223). - CVE-2026-16243: inconsistent handling of zero length data in `arraycmp` of the SIMD evaluator (bsc#1274275). - CVE-2026-16439: using `…
first Aug 13, 2026 -
High max 8.1SUSE-SU-2026:3614-1 14 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223). - CVE-2026-16243: inconsistent handling of zero length data in `arraycmp` of the SIMD evaluator (bsc#1274275). - CVE-2026-16439: using `…
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3613-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3612-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.567.gf5cfeb7f7. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3611-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 055+suse.404.gc96044c. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 13, 2026 -
Low max 3.7openSUSE-SU-2026:11510-1 1 CVE
python313-nltk-3.10.2-1.1 on GA media
These are all security issues fixed in the python313-nltk-3.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11509-1 1 CVE
python3-ansible-compat-26.8.0-1.1 on GA media
These are all security issues fixed in the python3-ansible-compat-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
Critical max 9.9openSUSE-SU-2026:11508-1 21 CVEs
pgadmin4-9.17-1.1 on GA media
These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11507-1 1 CVE
molecule-26.8.0-1.1 on GA media
These are all security issues fixed in the molecule-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
Critical max 9.8openSUSE-SU-2026:11506-1 2 CVEs
kernel-devel-7.1.8-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 8.7openSUSE-SU-2026:11505-1 1 CVE
jetty-annotations-9.4.58-5.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.5openSUSE-SU-2026:11504-1 1 CVE
dracut-112+suse.29.gc0c5e1d-1.1 on GA media
These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.8openSUSE-SU-2026:11503-1 1 CVE
ansible-lint-26.8.0-1.1 on GA media
These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 7.7SUSE-SU-2026:3605-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - Backported support for the mlkemx25519 key exchange from upstream (jsc#PED-16473). - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an a…
first Aug 13, 2026 -
Medium max 6.5openSUSE-SU-2026:11502-1 7 CVEs
7zip-26.02-2.1 on GA media
These are all security issues fixed in the 7zip-26.02-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2026 -
High max 8.8SUSE-SU-2026:3604-1 1 CVE
Security update for kubevirt
This update for kubevirt fixes the following issue: - CVE-2026-13622: `virt-handler` migration proxy follows symlinks, allowing container escape to host (bsc#1272840).
first Aug 13, 2026 -
High max 7.5SUSE-SU-2026:3598-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432).
first Aug 12, 2026 -
High max 8.7SUSE-SU-2026:3601-1 11 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the…
first Aug 12, 2026 -
Medium max 5.5SUSE-SU-2026:3600-1 1 CVE
Security update for rpm
This update for rpm fixes the following issues: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584). Other updates and bugfixes: - Fix `libelf` hand…
first Aug 12, 2026 -
High max 7.5SUSE-SU-2026:3599-1 1 CVE
Security update for dracut
This update for dracut fixes the following issue: Update to version 055+suse.367.g85633e8. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…
first Aug 12, 2026 -
High max 7.1SUSE-SU-2026:3596-1 7 CVEs
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: Potential DoS and memory leak via TLS session use-a…
first Aug 12, 2026 -
High max 8.7SUSE-SU-2026:3597-1 4 CVEs
Security update for libheif
This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…
first Aug 12, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618). - CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on …
first Aug 12, 2026 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet_de…
first Aug 12, 2026