24006 matches found
SUSE-SU-2026:23053-1 Security update for wget
This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread bsc1271033. - CVE-2026-58470...
SUSE-SU-2026:23052-1 Security update for helm
This update for helm fixes the following issues Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth:...
SUSE-SU-2026:23138-1 Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued GITHUBTOKEN disclosure in GitHub Actions logs bsc1271504. - CVE-2026-59946: path traversal in package bin field lets dependencies chmod arbitrary host files bsc1271151. - CVE-2026-59947: URL-embedded...
SUSE-SU-2026:23116-1 Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued GITHUBTOKEN disclosure in GitHub Actions logs bsc1271504. - CVE-2026-59946: path traversal in package bin field lets dependencies chmod arbitrary host files bsc1271151. - CVE-2026-59947: URL-embedded...
SUSE-SU-2026:23051-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inpu...
SUSE-SU-2026:23137-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719: Site isolation issue in the DOM: Navigation component...
SUSE-SU-2026:23115-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719: Site isolation issue in the DOM: Navigation component...
SUSE-SU-2026:3477-1 Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...
SUSE-SU-2026:3476-1 Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...
SUSE-SU-2026:3475-1 Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270185...
SUSE-SU-2026:3474-1 Security update for s390-tools
This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270185...
SUSE-SU-2026:3473-1 Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266651. Changes for aws-iam-authenticator: - Update golang.org/x/net to v0.57.0...
SUSE-SU-2026:3472-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....
SUSE-SU-2026:3471-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....
SUSE-SU-2026:3470-1 Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operating system...
SUSE-SU-2026:3469-1 Security update for nginx
This update for nginx fixes the following issue: - CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow bsc1271514...
SUSE-SU-2026:3468-1 Security update for rrdtool
This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...
SUSE-SU-2026:3463-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. - CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure...
SUSE-SU-2026:3462-1 Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...
SUSE-SU-2026:3461-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a...
SUSE-SU-2026:3460-1 Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...
SUSE-SU-2026:3459-1 Security update for python3-dulwich
This update for python3-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525...
SUSE-SU-2026:3458-1 Security update for vim
This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary...
SUSE-SU-2026:3457-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
SUSE-SU-2026:3456-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214...
SUSE-SU-2026:3455-1 Security update for gawk
This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free in the io.c program file via the dogetlineredir routine bsc1271351. - CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. - CVE-2026-40553: buffer overflow in the extension/readdir.c program...
SUSE-SU-2026:3454-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in parsedate when processing specially crafted date strings bsc1271705...
SUSE-SU-2026:3453-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: unauthenticated attacker with...
SUSE-SU-2026:3452-1 Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. - CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...
SUSE-SU-2026:3451-1 Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...
SUSE-SU-2026:3450-1 Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266...
SUSE-SU-2026:3449-1 Security update for rrdtool
This update for rrdtool fixes the following issue - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...
SUSE-SU-2026:3448-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap buffer overflow in the map directive and regex matching bsc1271514. - CVE-2026-48142: heap buffer overread in the...
SUSE-SU-2026:23114-1 Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301...
SUSE-SU-2026:23136-1 Security update for python-ujson
This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301...
SUSE-SU-2026:23078-1 Security update for glib2
This update for glib2 fixes the following issues - CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. - CVE-2026-58011: invalid GDateTime in gdatetimegetymd could trigger a 2-byte out-of-bounds read bsc1270010. - CVE-2026-58012:...
SUSE-SU-2026:23077-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inpu...
SUSE-SU-2026:23076-1 Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...
SUSE-SU-2026:23048-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service bsc1268683...
SUSE-SU-2026:23047-1 Security update for runc
This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations bsc1268275. Changes for runc: - update to 1.3.6: Various integration test improvements. 5222, 5237, 5226, 5229, 5239, 5249,...
SUSE-SU-2026:23134-1 Security update for python-sh
This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation bsc1272424...
SUSE-SU-2026:23112-1 Security update for python-sh
This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation bsc1272424...
SUSE-SU-2026:23111-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...
SUSE-SU-2026:23133-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...
SUSE-SU-2026:3444-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
SUSE-SU-2026:3443-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issue: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo bsc1261678...
SUSE-SU-2026:3442-1 Security update for rsyslog
This update for rsyslog fixes the following issue: - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414...
SUSE-SU-2026:3441-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files bsc1268878...
SUSE-SU-2026:3440-1 Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.120: Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...
SUSE-SU-2026:3439-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inpu...