35,581 results · Feed
-
Critical max 9.6SUSE-SU-2026:22994-1 3 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation (bsc#1272488). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded l…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22993-1 6 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22992-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22991-1 6 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22990-1 6 CVEs
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22989-1 6 CVEs
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22988-1 6 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22987-1 5 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22986-1 5 CVEs
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22985-1 5 CVEs
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22984-1 5 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 30, 2026 -
Critical max 9.8SUSE-SU-2026:22983-1 5 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:22982-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:22981-1 2 CVEs
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
High max 8.8SUSE-SU-2026:22980-1 2 CVEs
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 30, 2026 -
UnscoredSUSE-SU-2026:22979-1 0 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Changes in libpng16: Version update to 1.6.58 [jsc#PED-16190] * see CHANGES for other upstream changes
first Jul 29, 2026 -
High max 7.7SUSE-SU-2026:22978-1 8 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an attacker-controlled server (bsc#1271044). - CVE-2026-59996: scp: file placed in the pa…
first Jul 29, 2026 -
Critical max 9.8SUSE-SU-2026:22973-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22971-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22977-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths witho…
first Jul 29, 2026 -
Critical max 9.8SUSE-SU-2026:22975-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22974-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22972-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22970-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22969-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22968-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22967-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22966-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22965-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 28, 2026 -
Critical max 9.8SUSE-SU-2026:22964-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22963-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22962-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
High max 8.8SUSE-SU-2026:22961-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…
first Jul 28, 2026 -
Critical max 9.1SUSE-SU-2026:22959-1 6 CVEs
Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor…
first Jul 28, 2026 -
Medium max 5.1SUSE-SU-2026:3470-1 2 CVEs
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to…
first Aug 3, 2026 -
High max 8.8SUSE-SU-2026:3462-1 15 CVEs
Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…
first Aug 3, 2026 -
Critical max 9.6SUSE-SU-2026:3472-1 1 CVE
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…
first Aug 3, 2026 -
High max 7.8SUSE-SU-2026:3468-1 1 CVE
Security update for rrdtool
This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).
first Aug 3, 2026 -
Medium max 6.5SUSE-SU-2026:3463-1 7 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service…
first Aug 3, 2026 -
Critical max 9.8SUSE-SU-2026:3461-1 6 CVEs
Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an in…
first Aug 3, 2026