Lucene search
+L
SuseMost viewed

6484 matches found

SUSE Linux
SUSE Linux
•added 2026/09/03 7:19 a.m.•14 views

Security update for nodejs20

This update for nodejs20 fixes the following issues: CVE-2025-22150: undici: predictable random values used when defining the boundary for a multipart/form-data request bsc1236258. CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery...

8.7CVSS6.9AI score0.03711EPSS
SaveExploits4References142
SUSE Linux
SUSE Linux
•added 2026/09/03 7:18 a.m.•14 views

Security update for nodejs20

This update for nodejs20 fixes the following issues: CVE-2025-22150: undici: predictable random values used when defining the boundary for a multipart/form-data request bsc1236258. CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery...

8.7CVSS6.9AI score0.03711EPSS
SaveExploits4References142
SUSE Linux
SUSE Linux
•added 2026/09/03 7:17 a.m.•14 views

Security update for apptainer

This update for apptainer fixes the following issue: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276731. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

5.3CVSS6.1AI score0.00336EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/08/31 3:02 p.m.•14 views

Security update for python-httplib2

This update for python-httplib2 fixes the following issue: CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095. Patch Instructions: To...

7.5CVSS6.7AI score0.00665EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/08/31 2:58 p.m.•14 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.9AI score0.01484EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/08/31 2:56 p.m.•14 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.4.6. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.9AI score0.01484EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/08/28 1:05 p.m.•14 views

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

6.1AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/08/25 12:41 p.m.•14 views

Security update for curl

This update for curl fixes the following issues: CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. CVE-2026-6276: stale custom cookie host causes...

8.3CVSS5.7AI score0.0075EPSS
SaveExploits7References28
SUSE Linux
SUSE Linux
•added 2026/08/25 8:16 a.m.•14 views

Security update for runc

This update for runc rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Enterprise Storage...

5.2AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/08/24 9:07 p.m.•14 views

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

8.9CVSS5.9AI score0.00745EPSS
SaveExploits12References84
SUSE Linux
SUSE Linux
•added 2026/08/24 7:04 p.m.•14 views

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

8.9CVSS5.7AI score0.00745EPSS
SaveExploits12References84
SUSE Linux
SUSE Linux
•added 2026/08/24 12:16 p.m.•14 views

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

8.9CVSS5.6AI score0.00745EPSS
SaveExploits12References76
SUSE Linux
SUSE Linux
•added 2026/08/21 9:04 a.m.•14 views

Security update for sccache

This update for sccache fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values bsc1273881. CVE-2026-66754: rouille:...

8.7CVSS5.5AI score0.00629EPSS
SaveExploits4References20
SUSE Linux
SUSE Linux
•added 2026/08/21 7:13 a.m.•14 views

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

5.2AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/08/20 5:16 p.m.•14 views

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. MFSA 2026-74 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74935: Privilege escalation in the DOM: Networking component...

7.5CVSS5.5AI score0.00715EPSS
SaveExploits4References118
SUSE Linux
SUSE Linux
•added 2026/08/20 5:06 p.m.•14 views

Security update for rsync

This update for rsync fixes the following issues: CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. CVE-2026-53785: --relative implied-parent creation...

9.2CVSS5.8AI score0.00788EPSS
SaveExploits1References134
SUSE Linux
SUSE Linux
•added 2026/08/19 9:54 a.m.•14 views

Security update for python313

This update for python313 fixes the following issues: CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. CVE-2026-0864: improper handling of...

8.7CVSS8.3AI score0.03196EPSS
SaveExploits1References52
SUSE Linux
SUSE Linux
•added 2026/08/11 2:56 p.m.•14 views

Security update for python3-pip

This update for python3-pip fixes the following issue: CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090. Patch Instructions: To install this SUSE update use the SUSE recommended...

5.6CVSS5.5AI score0.00292EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/08/11 8:37 a.m.•14 views

Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue: CVE-2026-52718: byte count instead of a bit count in gstav1parserparsetilelistobu can cause parser desynchronization and an application crash bsc1268394. Patch Instructions: To install this SUSE update use the SUSE recommended...

6.5CVSS7.7AI score0.00709EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/08/11 8:36 a.m.•14 views

Security update for ImageMagick

This update for ImageMagick fixes the following issue: CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check bsc1272953. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

4CVSS5.5AI score0.0033EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/08/10 2:02 p.m.•14 views

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.13. - MFSA 2026-72 bsc1271649 CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for forwarding CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719...

8.8CVSS5.5AI score0.00521EPSS
SaveExploits1References68
SUSE Linux
SUSE Linux
•added 2026/08/07 1:09 p.m.•14 views

Security update for libssh2_org

This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...

9.2CVSS7.5AI score0.00824EPSS
SaveExploits0References32
SUSE Linux
SUSE Linux
•added 2026/08/06 11:09 a.m.•14 views

Security update for openssl-3

This update for openssl-3 fixes the following issue HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

5.5AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/08/05 1:21 p.m.•14 views

Security update for pcp

This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...

9.8CVSS5.5AI score0.00655EPSS
SaveExploits0References28
SUSE Linux
SUSE Linux
•added 2026/08/05 11:58 a.m.•14 views

Security update for libXfont2

This update for libXfont2 fixes the following issues: CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660. Patch Instructions: To install this SUSE update use...

9.5CVSS5.8AI score0.00443EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/08/04 5:53 p.m.•14 views

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

8.1CVSS5.8AI score0.0094EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2026/08/03 4:58 p.m.•14 views

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

9.2CVSS5.5AI score0.00542EPSS
SaveExploits0References24
SUSE Linux
SUSE Linux
•added 2026/08/03 4:45 p.m.•14 views

Security update for s390-tools

This update for s390-tools fixes the following issue CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270185. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...

8.3CVSS5.6AI score0.00285EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/30 7:04 p.m.•14 views

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue Fixed an issue where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...

5.4AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/30 11:16 a.m.•14 views

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

3.3CVSS5.8AI score0.00173EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/30 7:04 a.m.•14 views

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

9.1CVSS6.3AI score0.00692EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/29 11:10 a.m.•14 views

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

8.7CVSS6.6AI score0.00442EPSS
SaveExploits1References40
SUSE Linux
SUSE Linux
•added 2026/07/29 10:53 a.m.•14 views

Security update for perl-XML-Bare

This update for perl-XML-Bare fixes the following issues CVE-2026-13401: infinite loop when parsing malformed attributes in parsercparse function bsc1271640. CVE-2026-57074: out-of-bounds read due to unbounded character lookahead in the parsercparse function bsc1271637. Patch Instructions: To...

6.2CVSS5.8AI score0.00632EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/29 10:39 a.m.•14 views

Security update for sssd

This update for sssd fixes the following issue: CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free bsc1269807. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7.1CVSS5.8AI score0.00121EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/28 3:33 p.m.•14 views

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. Patch Instructions: To install this SUSE update use the SUSE recommended...

9.3CVSS7.2AI score0.00171EPSS
SaveExploits5References4
SUSE Linux
SUSE Linux
•added 2026/07/28 10:11 a.m.•14 views

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

9.1CVSS6.4AI score0.00692EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/28 9:55 a.m.•14 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. CVE-2026-43663:...

8.8CVSS7.5AI score0.7066EPSS
SaveExploits17References48
SUSE Linux
SUSE Linux
•added 2026/07/28 4:35 a.m.•14 views

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.5AI score0.0049EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/07/27 1:50 p.m.•14 views

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

9.1CVSS6.7AI score0.0047EPSS
SaveExploits1References46
SUSE Linux
SUSE Linux
•added 2026/07/27 11:35 a.m.•14 views

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

9.3CVSS6.1AI score0.0049EPSS
SaveExploits5References24
SUSE Linux
SUSE Linux
•added 2026/07/27 11:01 a.m.•14 views

Security update for gzip

This update for gzip fixes the following issue: CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH bsc1269622. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/27 10:53 a.m.•14 views

Security update for ignition

This update for ignition fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid...

9.1CVSS5.9AI score0.00692EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/23 5:34 p.m.•14 views

Security update for avahi

This update for avahi fixes the following issue: CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTSMAX bsc1255451. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

6.8CVSS6.1AI score0.00179EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/07/23 2:05 p.m.•14 views

Security update for wget

This update for wget fixes the following issues CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. CVE-2026-58470: server-controlled Content-Range header values can cause an integer overflow in parsecontentrange bsc1271034...

6.9CVSS5.6AI score0.00423EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/07/22 7:25 a.m.•14 views

Security update for libgcrypt

This update for libgcrypt fixes the following issue CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

6.3CVSS7AI score0.00192EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/21 2:54 p.m.•14 views

Security update for php8

This update for php8 fixes the following issues Update to version 8.3.32. CVE-2026-12184: Failure to setup TLS with a remote server can result in a remote DoS bsc1270712. CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351...

6.3CVSS5.7AI score0.00279EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/07/21 12:58 p.m.•14 views

Security update for python-tornado6

This update for python-tornado6 fixes the following issue GHSA-pw6j-qg29-8w7f: CurlAsyncHTTPClient leaks per-request credentials on handle reuse bsc1269012. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.4AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/21 12:55 p.m.•14 views

Security update for nghttp2

This update for nghttp2 fixes the following issue CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning bsc1269489. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...

6.3CVSS5.6AI score0.00319EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/20 3:10 p.m.•14 views

Security update for 389-ds

This update for 389-ds fixes the following issues Update to version 2.7.0git212.9b0755edb. CVE-2026-11610: heap buffer overflow in sasliorecv via padded SASL UNBIND bsc1270695. CVE-2026-11611: content synchronization persistent search plugin can allow unbounded memory growth bsc1267975...

8.8CVSS6.5AI score0.00682EPSS
SaveExploits0References58
SUSE Linux
SUSE Linux
•added 2026/07/20 7:01 a.m.•14 views

Security update for microcode_ctl

This update for microcodectl fixes the following issue: CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks bsc1265189. Changes for microcodectl: Intel CPU Microcode was updated to the 20260512 release bsc1265189: Update for various...

6.8CVSS5.3AI score0.00096EPSS
SaveExploits0References4
Total number of security vulnerabilities5000