SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2026:4018-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4018-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4040-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4040-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4032-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4032-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072:...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4034-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4034-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4038-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4038-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

ALSA-2026:69541 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

SUSE SLED15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4016-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4016-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. -...

OESA-2026-3944 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

OESA-2026-3934 rsyslog security update

RSYSLOG is the rocket-fast system for log processing.It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transfo...

OESA-2026-3921 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

OESA-2026-3874 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OPENSUSE-SU-2026:21889-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/auxl items bsc1279443. - CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS...

net-snmp:snmp_sec_models_fuzzer: Heap-buffer-overflow in vacm_getAccessEntry

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4899370886299648 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpsecmodelsfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

Updated libde265 package fixes security vulnerabilities

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc. CVE-2024-38949 Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to...

MGASA-2026-0420 Updated libde265 package fixes security vulnerabilities

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc. CVE-2024-38949 Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to...

MGASA-2026-0427 Updated gawk packages fix security vulnerabilities

Use after free in gawk. CVE-2026-40467 Heap buffer overflow in gawk. CVE-2026-40468 Heap buffer overflow in gawk. CVE-2026-40469 Stack-based buffer overflow in gawk. CVE-2026-40553...

Debian dla-4784 : libnginx-mod-http-geoip - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4784 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4784-1 [email protected]...

Unbound 1.26.0 DNSKEY Digest Heap Overflow

Unbound version 1.26.0 and earlier contains a heap buffer overflow in DNSKEY digest processing. The supplied tracker documents affected versions, upstream 1.26.1 remediation, and distribution patch status...