Lucene search
+L
SuseMost viewed

5959 matches found

SUSE Linux
SUSE Linux
•added 2026/08/05 1:48 p.m.•7 views

Security update for php8

This update for php8 fixes the following issues: Update to version 8.3.33. Security issues fixed: CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. CVE-2026-9672: security issues in libgd bsc1273078. CVE-2026-17543:...

9.8CVSS5.7AI score0.00468EPSS
SaveExploits2References12
SUSE Linux
SUSE Linux
•added 2026/08/05 1:21 p.m.•7 views

Security update for pcp

This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...

9.8CVSS5.5AI score0.01077EPSS
SaveExploits0References28
SUSE Linux
SUSE Linux
•added 2026/08/05 1:20 p.m.•7 views

Security update for pcp

This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...

9.8CVSS5.5AI score0.01077EPSS
SaveExploits0References28
SUSE Linux
SUSE Linux
•added 2026/08/05 12:41 p.m.•7 views

Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.6.7: CVE-2026-5299: ICMPv6 dissector crash bsc1263757. CVE-2026-5401: AFP dissector crash bsc1263756. CVE-2026-5402: TLS dissector crash and possible code execution bsc1263755. CVE-2026-5403: SBC audio codec crash bsc126376...

8.8CVSS7AI score0.0039EPSS
SaveExploits50References224
SUSE Linux
SUSE Linux
•added 2026/08/04 5:53 p.m.•7 views

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

8.1CVSS5.8AI score
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2026/08/04 11:55 a.m.•7 views

Security update for openssl-1_1

This update for openssl-11 fixes the following issue HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...

5.5AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/08/04 11:53 a.m.•7 views

Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operating system...

8.8CVSS5.9AI score0.00126EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/08/04 11:42 a.m.•7 views

Security update for kubevirt

This update for kubevirt fixes the following issues: Security update correcting a CVE over-claim from the previous update, verified by auditing the fix code actually present in the vendored tree: CVE-2026-39821 bsc1266575: the previous entry claimed this fixed by the golang.org/x/net v0.55.0...

9.1CVSS6.7AI score0.00655EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/08/03 4:44 p.m.•7 views

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: Update golang.org/x/net to v0.57.0...

9.1CVSS6.1AI score0.00655EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/08/03 4:40 p.m.•7 views

Security update for nginx

This update for nginx fixes the following issue: CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow bsc1271514. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

9.2CVSS7.7AI score0.03506EPSS
SaveExploits5References4
SUSE Linux
SUSE Linux
•added 2026/08/03 11:47 a.m.•7 views

Security update for gawk

This update for gawk fixes the following issues: CVE-2026-40467: use-after-free in the io.c program file via the dogetlineredir routine bsc1271351. CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. CVE-2026-40553: buffer overflow in the extension/readdir.c program file vi...

5.1CVSS5.8AI score0.00291EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/08/03 11:26 a.m.•7 views

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

9.1CVSS6.7AI score0.00781EPSS
SaveExploits0References10
SUSE Linux
SUSE Linux
•added 2026/07/30 6:54 p.m.•7 views

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

3.3CVSS5.5AI score0.00186EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/30 11:20 a.m.•7 views

Security update for tomcat11

This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.24. Security issues fixed: CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

8.2CVSS5.8AI score0.00506EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/30 11:11 a.m.•7 views

Security update for python-urwid

This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.1CVSS5.9AI score0.00421EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/30 7:50 a.m.•7 views

Security update for xen

This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

8.9CVSS6AI score0.00474EPSS
SaveExploits0References54
SUSE Linux
SUSE Linux
•added 2026/07/30 7:37 a.m.•7 views

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2 Use proper obs time forma...

9.1CVSS6.3AI score0.00655EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2026/07/30 7:28 a.m.•7 views

Security update for liboqs, oqs-provider

This update for liboqs, oqs-provider fixes the following issues: disable KEMHQC and SIGMQOM and KEMNTRUPRIME on s390x for now, testsuite shows them not working. Updated to 0.16.0: Deprecation notice: SPHINCS+ was removed in 0.16.0. Security issues: Fixed uninitialized encapsderand pointer...

5.9CVSS6.3AI score0.00305EPSS
SaveExploits0References22
SUSE Linux
SUSE Linux
•added 2026/07/30 7:6 a.m.•7 views

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...

9.1CVSS6.3AI score0.00655EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/29 11:18 a.m.•7 views

Security update for xen

This update for xen fixes the following issues: CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

8.9CVSS6AI score0.00474EPSS
SaveExploits0References54
SUSE Linux
SUSE Linux
•added 2026/07/29 11:13 a.m.•7 views

Security update for python-dulwich

This update for python-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.1CVSS5.8AI score0.00195EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/29 10:59 a.m.•7 views

Security update for PackageKit

This update for PackageKit fixes the following issue: CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Special Instructions and Notes: Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.3CVSS5.8AI score0.00222EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/28 6:31 p.m.•7 views

Security update for python-urllib3

This update for python-urllib3 fixes the following issue CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.9CVSS7AI score0.00304EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/28 12:23 p.m.•7 views

Security update for sssd

This update for sssd fixes the following issue: CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free bsc1269807. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7.1CVSS5.8AI score0.00121EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/28 12:10 p.m.•7 views

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References12
SUSE Linux
SUSE Linux
•added 2026/07/28 4:35 a.m.•7 views

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/07/28 3:33 a.m.•8 views

Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References20
SUSE Linux
SUSE Linux
•added 2026/07/27 7:36 p.m.•7 views

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/07/27 5:4 p.m.•7 views

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. CVE-2026-53366: ipv4: account for fraggap on the paged allocati...

9.3CVSS7.2AI score0.00908EPSS
SaveExploits5References8
SUSE Linux
SUSE Linux
•added 2026/07/27 3:36 p.m.•7 views

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References20
SUSE Linux
SUSE Linux
•added 2026/07/27 1:40 p.m.•7 views

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. Missing network context validati...

3.7CVSS5.8AI score0.0074EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/27 11:32 a.m.•7 views

Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions...

7.1CVSS5.9AI score0.00346EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/07/27 11:1 a.m.•7 views

Security update for alsa

This update for alsa fixes the following issue CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c that can allow attackers to corrupt memory bsc1268853. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.8CVSS5.8AI score0.00138EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/27 10:59 a.m.•7 views

Security update for python-Pillow

This update for python-Pillow fixes the following issues: CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. CVE-2026-54059: bomb protection bypass via PCF font loading due to Image.frombytes being called without decompressionbombcheck bsc1270409...

7.5CVSS5.9AI score0.00476EPSS
SaveExploits11References44
SUSE Linux
SUSE Linux
•added 2026/07/27 10:53 a.m.•7 views

Security update for ignition

This update for ignition fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid...

9.1CVSS5.9AI score0.00655EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/27 10:52 a.m.•7 views

Security update for ignition

This update for ignition fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid...

9.1CVSS5.9AI score0.00655EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/26 6:33 p.m.•7 views

Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.00908EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/07/23 2:18 p.m.•7 views

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues CVE-2026-42616: heap buffer overflow in cat of cat.c can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image bsc1271102. CVE-2026-42617: heap buffer overflow in ntfsirtoib of index.c can lead to heap corrupti...

7.1CVSS5.7AI score
SaveExploits0References36
SUSE Linux
SUSE Linux
•added 2026/07/23 2:13 p.m.•7 views

Security update for gawk

This update for gawk fixes the following issue: CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...

4CVSS5.3AI score0.00201EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/23 2:11 p.m.•7 views

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers bsc1268398. CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to excessive resource consumption bsc1268543...

8.7CVSS5.3AI score0.00397EPSS
SaveExploits0References32
SUSE Linux
SUSE Linux
•added 2026/07/23 1:46 p.m.•7 views

Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API bsc1254867. CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain bsc1254866. Patch...

6.9CVSS6.5AI score0.00692EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/23 12:16 p.m.•7 views

Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses bsc1256331 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

4.3CVSS6.5AI score0.02714EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/22 2:34 p.m.•7 views

Security update for joe

This update for joe fixes the following issue CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

8.5CVSS5.8AI score
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/22 7:25 a.m.•7 views

Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issue Fixed an issue where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...

5.4AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/22 7:25 a.m.•7 views

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue Fixed a bug where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

5.4AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/21 2:55 p.m.•7 views

Security update for php7

This update for php7 fixes the following issue CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

6.3CVSS5.6AI score0.00279EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/21 2:51 p.m.•7 views

Security update for pam

This update for pam fixes the following issue CVE-2026-54411: timing discrepancy in the pamuserdb module's plaintext-password comparison bsc1268290. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

5.9CVSS5.2AI score0.00333EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/21 2:29 p.m.•7 views

Security update for python-tornado

This update for python-tornado fixes the following issues: GHSA-pw6j-qg29-8w7f: CurlAsyncHTTPClient leaks per-request credentials on handle reuse bsc1269012. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.4AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/21 1:34 p.m.•7 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1264484. CVE-2026-46052: ceph: only dadd negative dentries when they are unhashed bsc1267494...

9.3CVSS7.3AI score0.03234EPSS
SaveExploits9References190
SUSE Linux
SUSE Linux
•added 2026/07/20 1:56 p.m.•7 views

Security update for python311

This update for python311 fixes the following issues CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host bsc1261969. CVE-2026-4786: URLs containing %action can bypass mitigation that allows command injection via the webbrowser.open API bsc1262319. CVE-2026-6019: HT...

9.1CVSS6.8AI score0.00579EPSS
SaveExploits1References16
Total number of security vulnerabilities5000