23961 matches found
SUSE-SU-2026:23541-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. -...
SUSE-SU-2026:23482-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. -...
SUSE-SU-2026:23481-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...
SUSE-SU-2026:23477-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944 - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...
SUSE-SU-2026:4090-1 Security update for xen
This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...
SUSE-SU-2026:4089-1 Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839...
SUSE-SU-2026:4088-1 Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...
SUSE-SU-2026:4087-1 Security update for xen
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...
SUSE-SU-2026:23540-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23480-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23530-1 Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23479-1 Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23529-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...
SUSE-SU-2026:23528-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944 - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...
SUSE-SU-2026:23478-1 Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...
SUSE-SU-2026:4086-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...
SUSE-SU-2026:4083-1 Security update for emacs
This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color...
SUSE-SU-2026:23475-1 Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...
SUSE-SU-2026:23476-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
SUSE-SU-2026:23525-1 Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...
SUSE-SU-2026:23526-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
SUSE-SU-2026:23527-1 Security update for opensc
This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...
SUSE-SU-2026:4082-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution bsc1276981. - CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage...
SUSE-SU-2026:4081-1 Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...
SUSE-SU-2026:4080-1 Security update for libusb-1_0
This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664...
SUSE-SU-2026:4079-1 Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: - Update to version...
SUSE-SU-2026:4078-1 Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: - Update to version...
SUSE-SU-2026:4077-1 Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. - CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. - CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector...
SUSE-SU-2026:4076-1 Security update for python-tornado6
This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725...
SUSE-SU-2026:4075-1 Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...
SUSE-SU-2026:4074-1 Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962...
SUSE-SU-2026:4073-1 Security update for python-tornado
This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725...
SUSE-SU-2026:4072-1 Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-42215: command injection via Git options bypass bsc1264604. - CVE-2026-42284: unsafe option check validates multioptions before shlex.split transforms it bsc1264605. - CVE-2026-44243: path traversal in GitPython reference API...
SUSE-SU-2026:4071-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...
SUSE-SU-2026:4070-1 Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in nameprep bsc1277886...
SUSE-SU-2026:4069-1 Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...
SUSE-SU-2026:4068-1 Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...
SUSE-SU-2026:4067-1 Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...
SUSE-SU-2026:4066-1 Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...
SUSE-SU-2026:4065-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...
SUSE-SU-2026:4064-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
SUSE-SU-2026:4063-1 Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...
SUSE-SU-2026:4062-1 Security update for terraform-provider-null
This update for terraform-provider-null fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1278269. - CVE-2026-84304: github.com/grpc/grpc-g...
SUSE-SU-2026:4061-1 Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...
SUSE-SU-2026:4060-1 Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...
SUSE-SU-2026:4059-1 Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...
SUSE-SU-2026:4056-1 Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994...
SUSE-SU-2026:4055-1 Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...
SUSE-SU-2026:4054-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: Update to version jdk8u504 icedtea 3.40.1. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data bsc1275777. - CVE-2026-61308: unauthenticated attacker...