24006 matches found
SUSE-SU-2026:23552-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...
SUSE-SU-2026:23393-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...
SUSE-SU-2026:23391-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...
SUSE-SU-2026:23551-1 Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2025-49506: hash/password content leak via side channel timing attack against aprpasswordvalidate bsc1274237. - CVE-2026-32327: XML stack recursion crash bsc1274235. - CVE-2026-34191: SQL injection via aprdbdoracle bsc1274850. -...
SUSE-SU-2026:2641-1 Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...
SUSE-SU-2026:3846-1 Security update for python36-pip
This update for python36-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090...
SUSE-SU-2026:3843-1 Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. bsc1268596 - Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. - Fix flag parsing so tha...
SUSE-SU-2026:23351-1 Security update for qemu
This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...
SUSE-SU-2026:23550-1 Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution bsc1269623, bsc1272554...
SUSE-SU-2026:23392-1 Security update for gzip
This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution bsc1269623, bsc1272554...
SUSE-SU-2026:3842-1 Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture...
SUSE-SU-2026:3841-1 Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture...
SUSE-SU-2026:3840-1 Security update for wicked
This update for wicked fixes the following issues: Update to version 0.6.79. - CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to /run/wicked/leaseinfo. files bsc1265221. - CVE-2026-71401: out-of-bounds read due to IP length underfl...
SUSE-SU-2026:3839-1 Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture...
SUSE-SU-2026:3837-1 Security update for wicked
This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture...
SUSE-SU-2026:23362-1 Security update for qemu
This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...
SUSE-SU-2026:3834-1 Security update for librest0_7
This update for librest07 fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...
SUSE-SU-2026:23326-1 Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread...
SUSE-SU-2026:23297-1 Security update for wget
This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread...
SUSE-SU-2026:23296-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split...
SUSE-SU-2026:23343-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split...
SUSE-SU-2026:23342-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers bsc1267362. - CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct...
SUSE-SU-2026:23295-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers bsc1267362. - CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct...
SUSE-SU-2026:23291-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23339-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23341-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split...
SUSE-SU-2026:23293-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split...
SUSE-SU-2026:23292-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23340-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23361-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. Changes for curl: - Call httpsize first to prioritize...
SUSE-SU-2026:23350-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. Changes for curl: - Call httpsize first to prioritize...
SUSE-SU-2026:23360-1 Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in libngtcp2 for DNS-over-QUIC environments with high concurrency bsc1271879. - CVE-2026-32665: Remote DNS-over-QUIC denial of service due to quic-size budget...
SUSE-SU-2026:23349-1 Security update for unbound
This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in libngtcp2 for DNS-over-QUIC environments with high concurrency bsc1271879. - CVE-2026-32665: Remote DNS-over-QUIC denial of service due to quic-size budget...
SUSE-SU-2026:3830-1 Security update for go1.27
This update for go1.27 fixes the following issues: - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the...
SUSE-SU-2026:23290-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23338-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:3829-1 Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...
SUSE-SU-2026:23289-1 Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...
SUSE-SU-2026:23323-1 Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...
SUSE-SU-2026:23337-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:23288-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...
SUSE-SU-2026:3826-1 Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.299 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...
SUSE-SU-2026:23287-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...
SUSE-SU-2026:23336-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...
SUSE-SU-2026:3824-1 Security update for kubernetes
This update for kubernetes rebuilds it against the current go security release...
SUSE-SU-2026:3823-1 Security update for kubernetes-old
This update for kubernetes-old rebuilds it against the current go security release...
SUSE-SU-2026:3822-1 Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release...
SUSE-SU-2026:3821-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64530: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhand bsc1271867. - CVE-2026-64600: xfs: resample the data fork mapping after cycling...
SUSE-SU-2026:3820-1 Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...
SUSE-SU-2026:3819-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...