35,581 results · Feed
-
Medium max 6.9SUSE-SU-2026:3592-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623). - Crafted LZ…
first Aug 12, 2026 -
Medium max 6.9SUSE-SU-2026:3590-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623). - crafted LZ…
first Aug 12, 2026 -
UnscoredopenSUSE-SU-2026:21548-1 0 CVEs
Security update for gd
This update for gd fixes the following issue: - CVE-2026-9672: security issue in `libgd` (bsc#1273101).
first Aug 10, 2026 -
UnscoredSUSE-SU-2026:23058-1 0 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).
first Aug 7, 2026 -
Critical max 9.8SUSE-SU-2026:23033-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23032-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
High max 8.8
Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23017-1 6 CVEs
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23013-1 6 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.1SUSE-SU-2026:23008-1 5 CVEs
Security update for perl
This update for perl fixes the following issues - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date (bsc#1266361). - CVE-2026-8376: heap buffer overflow when compiling regular expressions with …
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23030-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:23028-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 28, 2026 -
Low max 2.9SUSE-SU-2026:23007-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
first Jul 28, 2026 -
Medium max 5.5openSUSE-SU-2026:21560-1 3 CVEs
Security update for kak-lsp
This update for kak-lsp fixes the following issues: Changes in kak-lsp: - Update to version 21.0.2: * Fix a regression that broke compatibility with Kakoune versions older than 2026.05.21 * Add a default configuration for Hare, using hare-lsp * Fix hangs afte…
first Aug 10, 2026 -
High max 7.8openSUSE-SU-2026:21558-1 5 CVEs
Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: - Update to 0.56.0: * Fixes CVE-2026-40034 (boo#1266434): the CommandForbiddenInModules trust check could be bypassed in gix_submodule::File::update(), which allowed arbitrary command e…
first Aug 10, 2026 -
High max 7.6openSUSE-SU-2026:21557-1 1 CVE
Security update for gleam
This update for gleam fixes the following issues: Changes in gleam: - Update to 1.18.1: * CVE-2026-59247: insufficient verification of data authenticity allows a MITM adversary to substitute forged Hex package contents during dependency resolution (bsc#127299…
first Aug 10, 2026 -
High max 8.1openSUSE-SU-2026:21553-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
first Aug 11, 2026 -
High max 7.5openSUSE-SU-2026:21552-1 2 CVEs
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check (bsc#1273063). - CVE-2026-60075: CPU exhaustion due to quadratic backtrac…
first Aug 10, 2026 -
Critical max 9.6openSUSE-SU-2026:21551-1 77 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w * GO-2…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21550-1 24 CVEs
Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in `libngtcp2` for DNS-over-QUIC environments with high concurrency (bsc#1271879). - CVE-2026-32665: Remote DNS-over-QUIC …
first Aug 10, 2026 -
High max 8.8openSUSE-SU-2026:21549-1 8 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21546-1 12 CVEs
Security update for nodejs24
This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 7.5openSUSE-SU-2026:21545-1 11 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…
first Aug 10, 2026 -
High max 8.7openSUSE-SU-2026:21544-1 7 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on `mmap` path (bsc#1271419). - CVE-2026-59197: heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `Imag…
first Aug 10, 2026 -
UnscoredSUSE-SU-2026:23062-1 0 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340). - file descriptor l…
first Aug 10, 2026 -
Medium max 6.4SUSE-SU-2026:23061-1 1 CVE
Security update for sssd
This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).
first Aug 10, 2026 -
High max 7.8SUSE-SU-2026:23059-1 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issue: - CVE-2024-4453: lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806).
first Aug 7, 2026 -
Critical max 9.6SUSE-SU-2026:23057-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…
first Aug 6, 2026 -
Medium max 6.5SUSE-SU-2026:23056-1 8 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59…
first Aug 6, 2026 -
UnscoredSUSE-SU-2026:23054-1 0 CVEs
Security update for multipath-tools
This update for multipath-tools fixes the following issues: Update to version 0.9.8+292+suse.c0523c1. Security issues fixed: - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk image(…
first Aug 6, 2026 -
High max 7.5SUSE-SU-2026:23053-1 5 CVEs
Security update for wget
This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buff…
first Aug 4, 2026 -
Critical max 9.6SUSE-SU-2026:23052-1 3 CVEs
Security update for helm
This update for helm fixes the following issues Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: oras…
first Aug 4, 2026 -
Critical max 9.6SUSE-SU-2026:23051-1 2 CVEs
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/tex…
first Aug 3, 2026 -
High max 7.5SUSE-SU-2026:23048-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service (bsc#1268683).
first Aug 3, 2026 -
Low max 3.3SUSE-SU-2026:23047-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations (bsc#1268275). Changes for runc: - update to 1.3.6: * Various integration test improve…
first Aug 3, 2026 -
Critical max 9.8SUSE-SU-2026:23046-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23045-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23044-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Critical max 9.8SUSE-SU-2026:23043-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…
first Jul 31, 2026 -
Medium max 5.1SUSE-SU-2026:23042-1 3 CVEs
Security update for gawk
This update for gawk fixes the following issues - CVE-2026-40467: use-after-free in the `io.c` program file via the `do_getline_redir()` routine (bsc#1271351). - CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352). - CVE-2026-40553:…
first Jul 30, 2026