24006 matches found
SUSE-SU-2026:21757-1 Security update for libarchive
This update for libarchive fixes the following issues - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 bsc1259928. - CVE-2026-4426:...
SUSE-SU-2026:21831-1 Security update for libarchive
This update for libarchive fixes the following issues - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 bsc1259928. - CVE-2026-4426:...
SUSE-SU-2026:21828-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues - Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-48 bsc1265212. MFSA 2026-48: - CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-8391: Other issue in the JavaScript Engine...
SUSE-SU-2026:21756-1 Security update for mcphost
This update for mcphost fixes the following issues - CVE-2025-30153: github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data Data Amplification in github.com/getkin/kin-openapi/openapi3filter bsc1264762. - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client...
SUSE-SU-2026:21827-1 Security update for mcphost
This update for mcphost fixes the following issues - CVE-2025-30153: github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data Data Amplification in github.com/getkin/kin-openapi/openapi3filter bsc1264762. - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client...
SUSE-SU-2026:21786-1 Security update for libzypp
This update for libzypp fixes the following issue - CVE-2026-44933: scan of the Mandatory signature verification plugin support bsc1265223...
SUSE-SU-2026:21867-1 Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive bsc1263707. - CVE-2026-5260: lib/pkcs11privkey: guard against overreading on short ciphertexts bsc1263715. - CVE-2026-5419: gnutlscipherdecrypt3: make PKCS7 unpadding...
SUSE-SU-2026:21785-1 Security update for cockpit
This update for cockpit fixes the following issues - CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI bsc1265040. - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory...
SUSE-SU-2026:21897-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues Security issue: - CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Non security issues: - TW 20250826 Kernel 6.16.3 tainted with value of 4 after reboot. bsc1249138. - Intel CPU Microcode was updated to the 20260512 release...
SUSE-SU-2026:21784-1 Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive bsc1263707. - CVE-2026-5260: lib/pkcs11privkey: guard against overreading on short ciphertexts bsc1263715. - CVE-2026-5419: gnutlscipherdecrypt3: make PKCS7 unpadding...
SUSE-SU-2026:21826-1 Security update for libsndfile
This update for libsndfile fixes the following issues - CVE-2025-52194: buffer overflow in the ircamreadheader function of file src/ircam.c when processing malformed IRCAM audio files bsc1248458. - CVE-2025-56226: memory leak in the mpegl3encoderinit function of mpegl3encode.c bsc1256702. -...
SUSE-SU-2026:2045-1 Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release...
SUSE-SU-2026:2044-1 Security update for rootlesskit
This update for rootlesskit rebuilds it against the current go security release...
SUSE-SU-2026:2043-1 Security update for rekor
This update for rekor rebuilds it against the current go security release...
SUSE-SU-2026:2042-1 Security update for container-suseconnect
This update for container-suseconnect rebuilds it against the current go security release...
SUSE-SU-2026:2039-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issue Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-48 bsc1265212 - CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-8391: Other issue in the JavaScript Engine component. -...
SUSE-SU-2026:2038-1 Security update for rsync
This update for rsync fixes the following issues - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-41035: Count of entries mismatch can lead to a use-after-free bsc1262223 - CVE-2026-43617: Authorization Bypass via Hostname Resolution bsc1264515. - CVE-2026-43618: Integer...
SUSE-SU-2026:21742-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
SUSE-SU-2026:21741-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects bsc1265267...
SUSE-SU-2026:21740-1 Security update for xz
This update for xz fixes the following issue - CVE-2026-34743: buffer overflow in lzmaindexappend bsc1261280...
SUSE-SU-2026:21729-1 Security update for xz
This update for xz fixes the following issue - CVE-2026-34743: buffer overflow in lzmaindexappend bsc1261280...
SUSE-SU-2026:2037-1 Security update for php8
This update for php8 fixes the following issues - CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when preparing SQL queries can lead to SQL injection bsc1264778. - CVE-2026-6722: use-after-free in SOAP using Apache map can lead to remote code execution bsc1264776. -...
SUSE-SU-2026:2036-1 Security update for java-1_8_0-openj9
This update for java-180-openj9 fixes the following issues - CVE-2026-1188: eclipse: ensure room for separator in omrsysinfogetprocessorfeaturestring bsc1265261. - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access bsc1262490. - CVE-2026-22013: unauthenticated...
SUSE-SU-2026:21728-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects bsc1265267...
SUSE-SU-2026:21739-1 Security update for rsync
This update for rsync fixes the following issues - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-43617: Authorization Bypass via Hostname Resolution bsc1264515. - CVE-2026-43618: Integer Overflow Information Disclosure bsc1264512. - CVE-2026-43619: Symlink Race Condition vi...
SUSE-SU-2026:21727-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
SUSE-SU-2026:21726-1 Security update for rsync
This update for rsync fixes the following issues Security issues: - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-43617: Authorization Bypass via Hostname Resolution bsc1264515. - CVE-2026-43618: Integer Overflow Information Disclosure bsc1264512. - CVE-2026-43619: Symlink...
SUSE-SU-2026:21725-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues Security issue: - CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Non security issues: - TW 20250826 Kernel 6.16.3 tainted with value of 4 after reboot. bsc1249138. - Intel CPU Microcode was updated to the 20260512 release...
SUSE-SU-2026:21738-1 Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues: - CVE-2026-44933: prevent configured scripts from escaping the sigcheck directory bsc1265223 Changes in libsolv: - update to version 0.7.37: fix parsing of sha512 checksums in debian repositories improve speed of dirpooladddir...
SUSE-SU-2026:21737-1 Security update for iproute2
This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences bsc1254324. Changes for iproute2: - support display of bound but unconnected sockets bsc1204562. - avoid spurious cgroup warning bsc1234383. - add post-6.4 follow-up fixes...
SUSE-SU-2026:2034-1 Security update for buildah
This update for buildah rebuilds it against the current go security release...
SUSE-SU-2026:2033-1 Security update for docker
This update for docker rebuilds it against the current go security release...
SUSE-SU-2026:2032-1 Security update for distribution
This update for distribution rebuilds it against the current go security release...
SUSE-SU-2026:2031-1 Security update for runc
This update for runc rebuilds it against the current go security release...
SUSE-SU-2026:2030-1 Security update for buildah
This update for buildah rebuilds it against the current go security release...
SUSE-SU-2026:2029-1 Security update for vim
This update for vim fixes the following issue: Security fixes: - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes bsc1261833. Other fixes: - Update to 9.2.0398. 9.2.0398: MS-Windows: missing strptime support 9.2.0397: tabpanel: double-click opens...
SUSE-SU-2026:2028-1 Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issue - CVE-2026-42198: client-side denial of service via malicious SCRAM-SHA-256 authentication bsc1264174...
SUSE-SU-2026:2025-1 Security update for openssh
This update for openssh fixes the following issues...
SUSE-SU-2026:2024-1 Security update for openssh
This update for openssh fixes the following issues...
SUSE-SU-2026:2023-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...
SUSE-SU-2026:2022-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...
SUSE-SU-2026:2021-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...
SUSE-SU-2026:2020-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...
SUSE-SU-2026:2019-1 Security update for cockpit
This update for cockpit fixes the following issues - CVE-2026-0775: npm: loading of modules from an unsecured location can be used for local privilege escalation and arbitrary code execution in the context of a target user bsc1256521. - CVE-2026-4802: remote command execution via unsanitized...
SUSE-SU-2026:21724-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix one issue - CVE-2026-46333: ptrace: slightly saner 'getdumpable' logic bsc1265308...
SUSE-SU-2026:21824-1 Security update for leancrypto
This update for leancrypto fixes the following issues Security issue: - CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when stori...
SUSE-SU-2026:21754-1 Security update for leancrypto
This update for leancrypto fixes the following issues Security issue: - CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when stori...
SUSE-SU-2026:21823-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2026-1642: plain text data injection into the response from an upstream proxied server bsc1257675. - CVE-2026-27654: buffer overflow in the NGINX worker process via the ngxhttpdavmodule module bsc1260416. - CVE-2026-27784: NGINX worker memor...
SUSE-SU-2026:21735-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix one issue - CVE-2026-46333: ptrace: slightly saner 'getdumpable' logic bsc1265308...