Lucene search
+L
SuseMost viewed

6294 matches found

SUSE Linux
SUSE Linux
•added 2026/06/15 5:04 p.m.•12 views

Security update for perl-XML-LibXML

This update for perl-XML-LibXML fixes the following issue CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences bsc1264715. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.2CVSS5.4AI score0.00629EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/06/15 3:05 p.m.•12 views

Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion bsc1266340. CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption bsc1266341. CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL...

8.2CVSS8.1AI score0.03566EPSS
SaveExploits0References30
SUSE Linux
SUSE Linux
•added 2026/06/11 6:54 a.m.•12 views

Security update for cockpit

This update for cockpit fixes the following issues CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI bsc1265040. CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumptio...

8.8CVSS6.8AI score0.01455EPSS
SaveExploits2References16
SUSE Linux
SUSE Linux
•added 2026/06/10 1:15 p.m.•12 views

Security update for kubernetes1.24

This update for kubernetes1.24 fixes the following issues CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265740. CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service...

7.5CVSS5.4AI score0.00781EPSS
SaveExploits0References10
SUSE Linux
SUSE Linux
•added 2026/06/10 1:15 p.m.•12 views

Security update for kubernetes

This update for kubernetes fixes the following issues CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265748. CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service...

7.5CVSS5.4AI score0.00781EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/06/09 7:05 p.m.•12 views

Security update for go1.25

This update for go1.25 fixes the following issues Update to go1.25.11 bsc1244485: CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. CVE-2026-42507: net/textproto: arbitrary input are...

6.9CVSS5.7AI score0.00591EPSS
SaveExploits0References14
SUSE Linux
SUSE Linux
•added 2026/06/08 3:27 p.m.•12 views

Security update for postgresql17

This update for postgresql17 fixes the following issues Update to version 17.10. Security issues: CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. CVE-2026-6474: Guard against...

8.8CVSS5.9AI score0.01006EPSS
SaveExploits0References46
SUSE Linux
SUSE Linux
•added 2026/06/05 12:14 p.m.•12 views

Security update for mariadb

This update for mariadb fixes the following issues: Security fixes: CVE-2026-3494: audit plugin comment handling bypass bsc1259176. CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side bsc1266442. CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized...

9.4CVSS7AI score0.01582EPSS
SaveExploits1References36
SUSE Linux
SUSE Linux
•added 2026/06/03 2:16 p.m.•12 views

Security update for salt

This update for salt fixes the following issue: Security issues fixed: CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service bsc1259554. Other updates and bugfixes: Use non vendored Tornado with Python 3.11 bsc1257583, bsc1259700 Harden Torna...

8.7CVSS7.2AI score0.00375EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/06/03 2:13 p.m.•12 views

Security update 5.0.8 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service bsc1259554 CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow...

8.7CVSS7.5AI score0.00704EPSS
SaveExploits0References26
SUSE Linux
SUSE Linux
•added 2026/05/31 11:34 a.m.•12 views

Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues The following security issues were fixed: CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264096. CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259798...

8.8CVSS6AI score0.09481EPSS
SaveExploits20References20
SUSE Linux
SUSE Linux
•added 2026/05/26 1:45 p.m.•12 views

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-7374: Fixed privilege escalation and node compromise via symlink following vulnerability bsc1265467 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

9.9CVSS5.8AI score0.00742EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/26 7:30 a.m.•12 views

Security update for busybox

This update for busybox fixes the following issue CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client bsc1263989. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.1CVSS6AI score0.00375EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/26 7:28 a.m.•12 views

Security update for xen

This update for xen fixes the following issues CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. CVE-2026-23558: grant tabl...

7.8CVSS5.8AI score0.00287EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/05/26 7:11 a.m.•12 views

Security update for python-urllib3

This update for python-urllib3 fixes the following issue CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects bsc1265267. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

8.2CVSS5.8AI score0.00331EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/25 2:04 p.m.•12 views

Security update for libpng16

This update for libpng16 fixes the following issue: CVE-2026-34757: information disclosure and data corruption due to use-after-free in pngsetPLTE, pngsettRNS and pngsethIST bsc1261957. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.1CVSS5.8AI score0.00195EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/05/22 5:53 a.m.•12 views

Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

5.8AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/05/18 8:13 a.m.•12 views

Security update for tiff

This update for tiff fixes the following issue CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function bsc1260411. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

8.8CVSS5.8AI score0.00553EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/18 7:53 a.m.•12 views

Security update for nginx

This update for nginx fixes the following issues Security issues: CVE-2026-1642: plain text data injection into the response from an upstream proxied server bsc1257675. CVE-2026-27654: buffer overflow in the NGINX worker process via the ngxhttpdavmodule module bsc1260416. CVE-2026-27784: NGINX...

8.3CVSS7.7AI score0.25066EPSS
SaveExploits2References18
SUSE Linux
SUSE Linux
•added 2026/05/18 7:49 a.m.•12 views

Security update for python310

This update for python310 fixes the following issues Security issues: CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bsc1261969. CVE-2026-3446: base64 decoding stops at first padded quad by default bsc1261970. CVE-2026-4786: incomplete mitigation of , %action expansion fo...

9.1CVSS7.9AI score0.00579EPSS
SaveExploits1References22
SUSE Linux
SUSE Linux
•added 2026/05/18 7:46 a.m.•12 views

Security update for postgresql17

This update for postgresql17 fixes the following issues Update to version 17.10. Security issues: CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. CVE-2026-6474: Guard against...

8.8CVSS6.1AI score0.01006EPSS
SaveExploits0References46
SUSE Linux
SUSE Linux
•added 2026/05/18 7:44 a.m.•12 views

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. CVE-2026-6276:...

8.3CVSS7AI score0.00719EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/05/18 7:42 a.m.•12 views

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936. Patch Instructions: To install this SUSE update use th...

8.7CVSS6.3AI score0.00651EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/13 9:13 a.m.•12 views

Security update for Mesa

This update for Mesa fixes the following issue: CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party bsc1261998. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

6.8CVSS5.8AI score0.00427EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/08 3:20 p.m.•12 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix the following issue: This fixes the DirtyFrag issues: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc and afs modules are disabled bsc1264450 Special Instructions and Notes: Pleas...

8.8CVSS6AI score0.93235EPSS
SaveExploits34References8
SUSE Linux
SUSE Linux
•added 2026/05/07 1:55 p.m.•12 views

Security update for freeipmi

This update for freeipmi fixes the following issue: CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses bsc1260414. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

7.6CVSS5.9AI score0.00403EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/07 1:54 p.m.•12 views

Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 2.0.20git89.937b1f291. Security issues fixed: CVE-2025-14905: heap buffer overflow due to improper size calculation in schemaattrenumcallback callback bsc1258727. Other updates and bugfixes: Issue 7224 - CI Test - Simplify...

8.6CVSS6AI score0.01138EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/07 11:52 a.m.•12 views

Security update for librsvg

This update for librsvg fixes the following issue: CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257922. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

8.7CVSS5.8AI score0.00303EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/07 7:15 a.m.•12 views

Security update for xen

This update for xen fixes the following issues: Update to Xen 4.20.3 bug fix release bsc1027519 jscPED-8907. CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. CVE-2026-23558: grant table v...

7.8CVSS5.8AI score0.00191EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/05/07 7:15 a.m.•12 views

Security update for mozjs52

This update for mozjs52 fixes the following issues CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value bsc1259728. CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing bsc1259713...

8.7CVSS5.8AI score0.00216EPSS
SaveExploits1References12
SUSE Linux
SUSE Linux
•added 2026/05/06 12:08 p.m.•12 views

Security update for erlang

This update for erlang fixes the following issues: CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc1259681. CVE-2026-23943: denia...

9.1CVSS7.2AI score0.00644EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2026/05/06 10:28 a.m.•12 views

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of accessibl...

8.7CVSS7.3AI score0.00702EPSS
SaveExploits2References38
SUSE Linux
SUSE Linux
•added 2026/05/04 9:19 a.m.•12 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix one security issue The following security issue was fixed: CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algifaead bsc1262573. Special Instructions and Notes: Please reboot the system after...

7.8CVSS6.1AI score0.99907EPSS
SaveExploits242References4
SUSE Linux
SUSE Linux
•added 2026/04/28 6:07 p.m.•12 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: CVE-2026-20643: processing maliciously crafted web content may bypass Same Origin Policy bsc1261172. CVE-2026-20664: processing maliciously crafted web content may lead to an unexpected proces...

6.5CVSS5.6AI score0.0072EPSS
SaveExploits2References32
SUSE Linux
SUSE Linux
•added 2026/04/23 4:39 p.m.•12 views

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to go1.25.9 bsc1244485. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile:...

7.5CVSS5.6AI score0.00621EPSS
SaveExploits0References40
SUSE Linux
SUSE Linux
•added 2026/04/21 6:27 a.m.•12 views

Security update for podman

This update for podman rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15....

5.7AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/04/20 4:16 p.m.•12 views

Security update for ncurses

This update for ncurses fixes the following issue: CVE-2025-69720: buffer overflow in function analyzestringof progs/infocmp.c bsc1259924. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

4.4CVSS6AI score0.00447EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/04/20 4:16 p.m.•12 views

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issue: CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application bsc1261209. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

8.7CVSS5.7AI score0.00382EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/04/20 1:35 p.m.•12 views

Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

5.7AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/04/17 10:13 a.m.•12 views

Security update for libcap

This update for libcap fixes the following issue: CVE-2026-4878: Address a potential TOCTOU race condition in capsetfile bsc1261809. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

7.3CVSS5.7AI score0.00206EPSS
SaveExploits2References4
SUSE Linux
SUSE Linux
•added 2026/04/17 10:00 a.m.•12 views

Security update for bind

This update for bind fixes the following issues: CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations bsc1260805. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.7CVSS7.4AI score0.01599EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/16 9:18 a.m.•12 views

Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0280. CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution bsc1261271. CVE-2026-34714: missing checks allow for a tabpanel modeline escape and can lead to...

9.3CVSS6.8AI score0.00834EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/04/15 2:35 p.m.•12 views

Security update for libpng16

This update for libpng16 fixes the following issues: CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE can lead to arbitrary code execution bsc1260754. CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and...

9.2CVSS6.4AI score0.01052EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2026/04/15 1:36 p.m.•12 views

Security update for nghttp2

This update for nghttp2 fixes the following issue: CVE-2026-27135: assertion failure due to missing state validation can lead to DoS bsc1259845. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...

8.2CVSS5.8AI score0.00775EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/14 12:40 p.m.•12 views

Security update for go1.25

This update for go1.25 fixes the following issues: Update to go1.25.9 bsc1244485. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile: no-op...

7.5CVSS5.9AI score0.00658EPSS
SaveExploits0References38
SUSE Linux
SUSE Linux
•added 2026/04/13 4:02 p.m.•12 views

Security update for tigervnc

This update for tigervnc fixes the following issues: CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. bsc1260871 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7CVSS5.8AI score0.00247EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/08 7:12 a.m.•12 views

Security update for ignition

This update for ignition fixes the following issue: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260251 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS5.9AI score0.01557EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/04/07 2:19 p.m.•12 views

Security update for python

This update for python fixes the following issues: CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives bsc1259611. CVE-2026-3644: incomplete control character validation in http.cookies can lead to input...

8.2CVSS6.1AI score0.0069EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/04/07 12:25 p.m.•12 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447. CVE-2026-28686:...

8.8CVSS6.1AI score0.00475EPSS
SaveExploits0References80
SUSE Linux
SUSE Linux
•added 2026/04/07 12:24 p.m.•12 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. CVE-2026-28494: missing bounds checks in...

8.8CVSS6.1AI score0.00475EPSS
SaveExploits0References90
Total number of security vulnerabilities5000