6695 matches found
Security update for bind
This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...
Security update for python
This update for python fixes the following issues: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15806:...
Security update for ghostscript
This update for ghostscript fixes the following issue: CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
Security update for libsoup
This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...
Security update for python310
This update for python310 fixes the following issues: CVE-2026-7210: xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection bsc1264962. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806:...
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary condition...
Security update for python-Django
This update for python-Django fixes the following issues: CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481. CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when parsing...
Security update for go1.27
This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...
Security update for unbound
This update for unbound fixes the following issues: CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission bsc1280405...
Security update for expat
This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...
Security update for apache-sshd
This update for apache-sshd fixes the following issues: CVE-2026-77185: Asynchronous authentication can bypass signature verification bsc1283357. CVE-2026-93994: Repeated-publickey policy bypass on server bsc1283352. CVE-2026-93995: Remote execution of JGit "archive -o=file.zip" can write file on...
Security update for squid
This update for squid fixes the following issues: CVE-2026-32748: denial of service in ICP Request handling bsc1260453. CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. CVE-2026-33526: denial of service in ICP Request handling bsc1260452. CVE-2026-47729: out-of-bounds read...
Security update for unbound
This update for unbound fixes the following issues: CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission bsc1280405...
Security update for expat
This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...
Security update for python3-paramiko
This update for python3-paramiko fixes the following issue: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...
Security update for stunnel
This update for stunnel fixes the following issues: CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses bsc1274207. CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads bsc1274206. Patch Instruction...
Security update for libsoup
This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...
Security update for expat
This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...
Security update for perl-DBI
This update for perl-DBI fixes the following issues: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055...
Security update for rsyslog
This update for rsyslog fixes the following issues: imdtls permitted-peer authorization bypass bsc1281628. Changes for rsyslog: Upgrade to version 8.2608.0 bsc1257604 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Security update for flatpak
This update for flatpak fixes the following issues: CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host bsc1280236. CVE-2026-92162: path traversal via unvalidated arch parameter in DeployAppstream bsc1282514...
Security update for bind
This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...
Security update for fetchmail
This update for fetchmail fixes the following issue: CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for fetchmail
This update for fetchmail fixes the following issue: CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for php8
This update for php8 fixes the following issues: CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. CVE-2026-6103: Archive entry injection via integer...
Security update for php8
This update for php8 fixes the following issues: CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. CVE-2026-6103: Archive entry injection via integer...
Security update for grafana, system-user-grafana
This update for grafana, system-user-grafana fixes the following issues: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...
Security update for ghostscript
This update for ghostscript fixes the following issue: CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
Security update for bind
This update for bind fixes the following issues: CVE-2026-19666: Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path bsc1280433. CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dnsncacheadd bsc1280435. CVE-2026-80274: Validating resolver can abort while...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...
Security update for emacs
This update for emacs fixes the following issue: CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE bsc1282390. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...
Security update for python-hpack
This update for python-hpack fixes the following issue: CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime bsc1283035. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing bsc1283767. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like Ya...
Security update for glibc
This update for glibc fixes the following issues: CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. CVE-2026-8674: reachable assert in...
Security update for wpa_supplicant
This update for wpasupplicant fixes the following issue: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for php-composer2
This update for php-composer2 fixes the following issues: CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications bsc1271152. CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token...
Security update for wpa_supplicant
This update for wpasupplicant fixes the following issue: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for wpa_supplicant
This update for wpasupplicant fixes the following issue: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd Patch Instructions: To insta...
Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header length...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: mgr-push was updated to version 5.2.5: Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Updated...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: mgr-push: Version 5.2.5-0 Remove token based authentication mechanism for packagepush bsc1230949 spacecmd: Version 5.2.10-0 Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Version 5.2.9-0 Update translation...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...