Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 358 articles for you...
89
security advisoryfedoraupdateFedora 43 mingw-objfw Important Bug Fixes Advisory FEDORA-2026-de23fedf3e
Update to 1.5.5, containing many bug fixes, some also security related.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-de23fedf3e 2026-06-09 01:26:53.024690+00:00 -------------------------------------------------------------------------------- Name : mingw-objfw Product : Fedora 43 Version : 1.5.5 Release : 1.fc43 URL : https://objfw.nil.im Summary : MinGW port of ObjFW Description : ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you want to be portable. It supports all modern Objective-C features when using Clang, but is also compatible with GCC ≥ 4.6 to allow maximum portability. ObjFW also comes with its own lightweight and extremely fast Objective-C runtime, which in real world use cases was found to be significantly faster than both GNU's and Apple's runtime. -------------------------------------------------------------------------------- Update Information: Update to 1.5.5, containing many bug fixes, some also security related. -------------------------------------------------------------------------------- ChangeLog: * Sun May 31 2026 Jonathan Schleifer - 1.5.5-1 - Update to 1.5.5 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-de23fedf3e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update to Fedora 43 mingw-objfw 1.5.5 with important bug and security fixes announced in advisory FEDORA-2026-de23fedf3e.. Fedora Update, mingw-objfw, security fixes, package updates. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2026
•Important
Fedora
202
security advisoryimportantbug fixesopenSUSE Trivy Important Vulnerabilities Fix Advisory 2026-20833-1
An update that solves 14 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20833-1 Rating: important References: * bsc#1265648 * bsc#1266075 Cross-References: * CVE-2026-33814 * CVE-2026-39827 * CVE-2026-39828 * CVE-2026-39829 * CVE-2026-39830 * CVE-2026-39831 * CVE-2026-39832 * CVE-2026-39833 * CVE-2026-39834 * CVE-2026-39835 * CVE-2026-42508 * CVE-2026-46595 * CVE-2026-46597 * CVE-2026-46598 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39827 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39827 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39828 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39828 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39829 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39830 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39830 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39831 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39831 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39832 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39832 ( SUSE ): 6.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N * CVE-2026-39833 ( SUSE ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39833 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39834 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39834 ( SUSE ): 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39835 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39835 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42508 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42508 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46595 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46595 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46597 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46597 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46598 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46598 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 14 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for trivy fixes the following issues: Changes in trivy: - update x/crypto to 0.52.0 (bsc#1266075, CVE-2026-39827, CVE-2026-39834,CVE-2026-39828,CVE-2026-39829,CVE-2026-39831, CVE-2026-42508,CVE-2026-39833,CVE-2026-39830,CVE-2026-39832, CVE-2026-46597,CVE-2026-46598,CVE-2026-46595,CVE-2026-39835) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-272=1 Package List: - openSUSE Leap 16.0: trivy-0.70.0-bp160.3.1 References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39827.html * https://www.suse.com/security/cve/CVE-2026-39828.html *https://www.suse.com/security/cve/CVE-2026-39829.html * https://www.suse.com/security/cve/CVE-2026-39830.html * https://www.suse.com/security/cve/CVE-2026-39831.html * https://www.suse.com/security/cve/CVE-2026-39832.html * https://www.suse.com/security/cve/CVE-2026-39833.html * https://www.suse.com/security/cve/CVE-2026-39834.html * https://www.suse.com/security/cve/CVE-2026-39835.html * https://www.suse.com/security/cve/CVE-2026-42508.html * https://www.suse.com/security/cve/CVE-2026-46595.html * https://www.suse.com/security/cve/CVE-2026-46597.html * https://www.suse.com/security/cve/CVE-2026-46598.html . An important security advisory for openSUSE announces fixes for 14 vulnerabilities in trivy, addressing critical issues.. openSUSE security update, trivy vulnerabilities, bug fixes, important updates. . Severity: Important. LinuxSecurity.com Team
May 29, 2026
•Important
OpenSUSE
202
security advisoryimportantbug fixesopenSUSE Go1.26 Important Security Update Advisory 2026-20762-1
An update that solves 11 vulnerabilities and has 13 bug fixes can now be installed.. openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20762-1 Rating: important References: * bsc#1170826 * bsc#1255111 * bsc#1264499 * bsc#1264500 * bsc#1264501 * bsc#1264502 * bsc#1264503 * bsc#1264504 * bsc#1264505 * bsc#1264506 * bsc#1264507 * bsc#1264508 * bsc#1264509 Cross-References: * CVE-2026-33811 * CVE-2026-33814 * CVE-2026-39817 * CVE-2026-39819 * CVE-2026-39820 * CVE-2026-39823 * CVE-2026-39825 * CVE-2026-39826 * CVE-2026-39836 * CVE-2026-42499 * CVE-2026-42501 CVSS scores: * CVE-2026-33811 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39817 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N * CVE-2026-39819 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N * CVE-2026-39820 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39823 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-39825 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-39826 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-39836 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42499 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42501 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 11 vulnerabilities and has 13 bug fixes can now be installed. Description: This update for go1.26 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response (bsc#1264508). - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given badSETTINGS_MAX_FRAME_SIZE (bsc#1264506). - CVE-2026-39817: cmd/go: "go tool pack" does not sanitize output paths (bsc#1264505). - CVE-2026-39819: cmd/go: "go bug" follows symlinks in predictable temporary filenames (bsc#1264504). - CVE-2026-39820: net/mail: quadratic string concatentation in consumeComment (bsc#1264503). - CVE-2026-39823: html/template: bypass of meta content URL escaping causes XSS (bsc#1264509). - CVE-2026-39825: net/http/httputil: ReverseProxy forwards queries with more than urlmaxqueryparams parameters (bsc#1264500). - CVE-2026-39826: html/template: escaper bypass leads to XSS (bsc#1264507). - CVE-2026-39836: net: panic in Dial and LookupPort when handling NUL byte on Windows (bsc#1264501). - CVE-2026-42499: net/mail: quadratic string concatenation in consumePhrase (bsc#1264502). - CVE-2026-42501: cmd/go: malicious module proxy can bypass checksum database (bsc#1264499). Non security issues: - Updated to go1.26.3 (bsc#1255111). - Go packages miss binutils-gold dependency (bsc#1170826). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-758=1 Package List: - openSUSE Leap 16.0: go1.26-1.26.3-160000.1.1 go1.26-doc-1.26.3-160000.1.1 go1.26-libstd-1.26.3-160000.1.1 go1.26-race-1.26.3-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-33811.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39817.html * https://www.suse.com/security/cve/CVE-2026-39819.html * https://www.suse.com/security/cve/CVE-2026-39820.html * https://www.suse.com/security/cve/CVE-2026-39823.html * https://www.suse.com/security/cve/CVE-2026-39825.html * https://www.suse.com/security/cve/CVE-2026-39826.html * https://www.suse.com/security/cve/CVE-2026-39836.html *https://www.suse.com/security/cve/CVE-2026-42499.html * https://www.suse.com/security/cve/CVE-2026-42501.html . An update for openSUSE addressing 11 vulnerabilities and 13 bug fixes is now available for installation.. openSUSE security update, go1.26 vulnerabilities, network security fixes. . Severity: Important. LinuxSecurity.com Team
May 19, 2026
•Important
OpenSUSE
202
security advisorymemory corruptionimportantopenSUSE Leap 16.0 Emacs Moderate Memory Corruption CVE-2026-6861 20759-1
An update that solves one vulnerability and has 2 bug fixes can now be installed.. openSUSE security update: security update for emacs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20759-1 Rating: moderate References: * bsc#1262007 * bsc#1262611 Cross-References: * CVE-2026-6861 CVSS scores: * CVE-2026-6861 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H * CVE-2026-6861 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has 2 bug fixes can now be installed. Description: This update for emacs fixes the following issue: - CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data (bsc#1262611). - Build with tree-sitter-0.26.8 security update (bsc#1262007). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-755=1 Package List: - openSUSE Leap 16.0: emacs-30.2-160000.2.1 emacs-el-30.2-160000.2.1 emacs-eln-30.2-160000.2.1 emacs-games-30.2-160000.2.1 emacs-info-30.2-160000.2.1 emacs-nox-30.2-160000.2.1 emacs-x11-30.2-160000.2.1 etags-30.2-160000.2.1 References: * https://www.suse.com/security/cve/CVE-2026-6861.html . Critical memory corruption in Emacs resolved with moderate update ensuring system stability on openSUSE Leap 16.0.. Emacs Security Update, openSUSE Leap, Memory Corruption Fix, Software Patch. . Severity: Important. LinuxSecurity.com Team
May 19, 2026
•Important
OpenSUSE
100
security advisoryaccess controlimportantopenSUSE Leap 15.6 Kernel Significant Access Control Vulnerabilities Found
An update that solves three vulnerabilities can now be installed.. # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:1908-1 Release Date: 2026-05-17T17:14:47Z Rating: important References: * bsc#1264013 * bsc#1265209 * bsc#1265308 Cross-References: * CVE-2025-54518 * CVE-2026-46300 * CVE-2026-46333 CVSS scores: * CVE-2025-54518 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-54518 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-46300 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46300 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-46333 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: * CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013). * CVE-2026-46300: net: skbuff: propagate shared-frag marker through pskb_copy() (bsc#1265209). * CVE-2026-46333: Fixed logic bug in the Linux kernel's __ptrace_may_access() function (bsc#1265308). The following non security issues were fixed: * io-wq: check that the predecessor is hashed in io_wq_remove_pending() (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1908=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-1908=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1908=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1908=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-1908=1 ## Package List: * openSUSE Leap 15.6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (noarch) * kernel-docs-html-6.4.0-150600.23.109.1 * kernel-devel-6.4.0-150600.23.109.1 * kernel-source-vanilla-6.4.0-150600.23.109.1 * kernel-source-6.4.0-150600.23.109.1 * kernel-macros-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (nosrc ppc64le x86_64) * kernel-debug-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-150600.23.109.1 * kernel-obs-build-debugsource-6.4.0-150600.23.109.1 * kselftests-kmp-default-6.4.0-150600.23.109.1 * kernel-default-optional-6.4.0-150600.23.109.1 * ocfs2-kmp-default-6.4.0-150600.23.109.1 * kernel-default-extra-6.4.0-150600.23.109.1 * kernel-default-optional-debuginfo-6.4.0-150600.23.109.1 * kernel-syms-6.4.0-150600.23.109.1 * cluster-md-kmp-default-6.4.0-150600.23.109.1 * dlm-kmp-default-6.4.0-150600.23.109.1 * kernel-default-debuginfo-6.4.0-150600.23.109.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.109.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 *kernel-obs-build-6.4.0-150600.23.109.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-default-debugsource-6.4.0-150600.23.109.1 * gfs2-kmp-default-6.4.0-150600.23.109.1 * reiserfs-kmp-default-6.4.0-150600.23.109.1 * kernel-default-extra-debuginfo-6.4.0-150600.23.109.1 * kernel-obs-qa-6.4.0-150600.23.109.1 * kselftests-kmp-default-debuginfo-6.4.0-150600.23.109.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-default-livepatch-6.4.0-150600.23.109.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-6.4.0-150600.23.109.1 * kernel-kvmsmall-debugsource-6.4.0-150600.23.109.1 * kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.109.1 * kernel-kvmsmall-debuginfo-6.4.0-150600.23.109.1 * kernel-default-base-rebuild-6.4.0-150600.23.109.1.150600.12.50.2 * kernel-default-base-6.4.0-150600.23.109.1.150600.12.50.2 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_25-debugsource-1-150600.13.5.1 * kernel-livepatch-6_4_0-150600_23_109-default-1-150600.13.5.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-1-150600.13.5.1 * kernel-default-livepatch-devel-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (nosrc) * dtb-aarch64-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64) * dtb-lg-6.4.0-150600.23.109.1 * dtb-altera-6.4.0-150600.23.109.1 * dtb-marvell-6.4.0-150600.23.109.1 * dtb-arm-6.4.0-150600.23.109.1 * dtb-rockchip-6.4.0-150600.23.109.1 * kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * dtb-amlogic-6.4.0-150600.23.109.1 * kselftests-kmp-64kb-6.4.0-150600.23.109.1 * kernel-64kb-optional-6.4.0-150600.23.109.1 * kernel-64kb-extra-6.4.0-150600.23.109.1 *kernel-64kb-optional-debuginfo-6.4.0-150600.23.109.1 * dtb-freescale-6.4.0-150600.23.109.1 * reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * dlm-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * cluster-md-kmp-64kb-6.4.0-150600.23.109.1 * dtb-exynos-6.4.0-150600.23.109.1 * dtb-nvidia-6.4.0-150600.23.109.1 * kernel-64kb-extra-debuginfo-6.4.0-150600.23.109.1 * dtb-allwinner-6.4.0-150600.23.109.1 * dtb-xilinx-6.4.0-150600.23.109.1 * dtb-socionext-6.4.0-150600.23.109.1 * dtb-apm-6.4.0-150600.23.109.1 * kernel-64kb-devel-6.4.0-150600.23.109.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.109.1 * dtb-mediatek-6.4.0-150600.23.109.1 * dtb-cavium-6.4.0-150600.23.109.1 * dtb-apple-6.4.0-150600.23.109.1 * reiserfs-kmp-64kb-6.4.0-150600.23.109.1 * dtb-renesas-6.4.0-150600.23.109.1 * dtb-sprd-6.4.0-150600.23.109.1 * gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.109.1 * kernel-64kb-debuginfo-6.4.0-150600.23.109.1 * dtb-amd-6.4.0-150600.23.109.1 * dtb-hisilicon-6.4.0-150600.23.109.1 * ocfs2-kmp-64kb-6.4.0-150600.23.109.1 * gfs2-kmp-64kb-6.4.0-150600.23.109.1 * dtb-amazon-6.4.0-150600.23.109.1 * dlm-kmp-64kb-6.4.0-150600.23.109.1 * kernel-64kb-debugsource-6.4.0-150600.23.109.1 * dtb-broadcom-6.4.0-150600.23.109.1 * dtb-qcom-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (x86_64) * kernel-default-vdso-debuginfo-6.4.0-150600.23.109.1 * kernel-kvmsmall-vdso-6.4.0-150600.23.109.1 * kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.109.1 * kernel-debug-vdso-debuginfo-6.4.0-150600.23.109.1 * kernel-debug-vdso-6.4.0-150600.23.109.1 * kernel-default-vdso-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (nosrc s390x) *kernel-zfcpdump-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (s390x) * kernel-zfcpdump-debuginfo-6.4.0-150600.23.109.1 * kernel-zfcpdump-debugsource-6.4.0-150600.23.109.1 * openSUSE Leap 15.6 (ppc64le x86_64) * kernel-debug-devel-debuginfo-6.4.0-150600.23.109.1 * kernel-debug-devel-6.4.0-150600.23.109.1 * kernel-debug-debuginfo-6.4.0-150600.23.109.1 * kernel-debug-debugsource-6.4.0-150600.23.109.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc) * kernel-default-6.4.0-150600.23.109.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150600.23.109.1 * kernel-default-debuginfo-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-6.4.0-150600.23.109.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-default-debugsource-6.4.0-150600.23.109.1 * gfs2-kmp-default-6.4.0-150600.23.109.1 * kernel-default-devel-6.4.0-150600.23.109.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.109.1 * reiserfs-kmp-default-6.4.0-150600.23.109.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-obs-build-6.4.0-150600.23.109.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-syms-6.4.0-150600.23.109.1 * cluster-md-kmp-default-6.4.0-150600.23.109.1 * kernel-obs-build-debugsource-6.4.0-150600.23.109.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.109.1 * dlm-kmp-default-6.4.0-150600.23.109.1 * kernel-default-debuginfo-6.4.0-150600.23.109.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64) * kernel-64kb-devel-6.4.0-150600.23.109.1 * kernel-64kb-debuginfo-6.4.0-150600.23.109.1 * kernel-64kb-debugsource-6.4.0-150600.23.109.1 *kernel-64kb-devel-debuginfo-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.109.1.150600.12.50.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * kernel-macros-6.4.0-150600.23.109.1 * kernel-source-6.4.0-150600.23.109.1 * kernel-devel-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc) * kernel-docs-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * kernel-zfcpdump-debuginfo-6.4.0-150600.23.109.1 * kernel-zfcpdump-debugsource-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * kernel-default-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-default-debugsource-6.4.0-150600.23.109.1 * kernel-default-devel-6.4.0-150600.23.109.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.109.1 * reiserfs-kmp-default-6.4.0-150600.23.109.1 * gfs2-kmp-default-6.4.0-150600.23.109.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.109.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-obs-build-6.4.0-150600.23.109.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.109.1 * kernel-syms-6.4.0-150600.23.109.1 * cluster-md-kmp-default-6.4.0-150600.23.109.1 * kernel-obs-build-debugsource-6.4.0-150600.23.109.1 * kernel-default-base-6.4.0-150600.23.109.1.150600.12.50.2 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.109.1 * dlm-kmp-default-6.4.0-150600.23.109.1 * kernel-default-debuginfo-6.4.0-150600.23.109.1 * ocfs2-kmp-default-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server for SAPApplications 15 SP6 (noarch) * kernel-macros-6.4.0-150600.23.109.1 * kernel-source-6.4.0-150600.23.109.1 * kernel-devel-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Live Patching 15-SP6 (nosrc) * kernel-default-6.4.0-150600.23.109.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_25-debugsource-1-150600.13.5.1 * kernel-default-debugsource-6.4.0-150600.23.109.1 * kernel-livepatch-6_4_0-150600_23_109-default-1-150600.13.5.1 * kernel-default-debuginfo-6.4.0-150600.23.109.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-1-150600.13.5.1 * kernel-default-livepatch-6.4.0-150600.23.109.1 * kernel-default-livepatch-devel-6.4.0-150600.23.109.1 ## References: * https://www.suse.com/security/cve/CVE-2025-54518.html * https://www.suse.com/security/cve/CVE-2026-46300.html * https://www.suse.com/security/cve/CVE-2026-46333.html * https://bugzilla.suse.com/show_bug.cgi?id=1264013 * https://bugzilla.suse.com/show_bug.cgi?id=1265209 * https://bugzilla.suse.com/show_bug.cgi?id=1265308 . A critical kernel update for SUSE addresses multiple security issues, including access control flaws, and requires immediate installation.. SUSE kernel update, important security fix, openSUSE 15.6 kernel vulnerabilities. . Severity: Important. LinuxSecurity.com Team
May 18, 2026
•Important
SuSE
202
security advisoryimportantbug fixesopenSUSE Leap 16.0 Wireshark Important Issues Resolved 2026-20685-1
An update that solves 33 vulnerabilities and has 33 bug fixes can now be installed.. openSUSE security update: security update for wireshark ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20685-1 Rating: important References: * bsc#1258907 * bsc#1258909 * bsc#1263726 * bsc#1263728 * bsc#1263729 * bsc#1263731 * bsc#1263732 * bsc#1263733 * bsc#1263734 * bsc#1263735 * bsc#1263736 * bsc#1263737 * bsc#1263739 * bsc#1263741 * bsc#1263742 * bsc#1263743 * bsc#1263744 * bsc#1263745 * bsc#1263746 * bsc#1263747 * bsc#1263749 * bsc#1263750 * bsc#1263751 * bsc#1263752 * bsc#1263753 * bsc#1263754 * bsc#1263756 * bsc#1263757 * bsc#1263762 * bsc#1263765 * bsc#1263766 * bsc#1263767 * bsc#1263809 Cross-References: * CVE-2026-3201 * CVE-2026-3203 * CVE-2026-5299 * CVE-2026-5401 * CVE-2026-5403 * CVE-2026-5404 * CVE-2026-5405 * CVE-2026-5406 * CVE-2026-5407 * CVE-2026-5408 * CVE-2026-5409 * CVE-2026-5653 * CVE-2026-5654 * CVE-2026-5656 * CVE-2026-5657 * CVE-2026-6519 * CVE-2026-6520 * CVE-2026-6521 * CVE-2026-6522 * CVE-2026-6523 * CVE-2026-6524 * CVE-2026-6527 * CVE-2026-6529 * CVE-2026-6530 * CVE-2026-6531 * CVE-2026-6532 * CVE-2026-6533 * CVE-2026-6534 * CVE-2026-6535 * CVE-2026-6537 * CVE-2026-6538 * CVE-2026-6868 * CVE-2026-6869 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 33 vulnerabilities and has 33 bug fixes can now be installed. Description: This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to memory exhaustion (bsc#1258907). - CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash (bsc#1258909). - CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757). -CVE-2026-5401: AFP dissector crash (bsc#1263756). - CVE-2026-5403: SBC audio codec crash (bsc#1263765). - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766). - CVE-2026-5405: RDP dissector crash (bsc#1263767). - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754). - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753). - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752). - CVE-2026-5409: Monero dissector crash (bsc#1263751). - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750). - CVE-2026-5654: AMR-NB audio codec crash (bsc#1263749). - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809). - CVE-2026-5657: iLBC audio codec crash (bsc#1263747). - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746). - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745). - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744). - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743). - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742). - CVE-2026-6524: MySQL protocol dissector crash (bsc#1263741). - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739). - CVE-2026-6529: iLBC audio codec crash (bsc#1263737). - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736). - CVE-2026-6531: SANE protocol dissector infinite loop (bsc#1263735). - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734). - CVE-2026-6533: Dissection engine LZ77 decompression crash (bsc#1263733). - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732). - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731). - CVE-2026-6537: ZigBee dissector crash (bsc#1263729). - CVE-2026-6538: BEEP dissector crash (bsc#1263728). - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762). - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726). Changes for wireshark: - Updated to 4.4.15 Patch instructions: To install this openSUSE security update use the suse recommended installationmethods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-702=1 Package List: - openSUSE Leap 16.0: libwireshark18-4.4.15-160000.1.1 libwiretap15-4.4.15-160000.1.1 libwsutil16-4.4.15-160000.1.1 wireshark-4.4.15-160000.1.1 wireshark-devel-4.4.15-160000.1.1 wireshark-ui-qt-4.4.15-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-3201.html * https://www.suse.com/security/cve/CVE-2026-3203.html * https://www.suse.com/security/cve/CVE-2026-5299.html * https://www.suse.com/security/cve/CVE-2026-5401.html * https://www.suse.com/security/cve/CVE-2026-5403.html * https://www.suse.com/security/cve/CVE-2026-5404.html * https://www.suse.com/security/cve/CVE-2026-5405.html * https://www.suse.com/security/cve/CVE-2026-5406.html * https://www.suse.com/security/cve/CVE-2026-5407.html * https://www.suse.com/security/cve/CVE-2026-5408.html * https://www.suse.com/security/cve/CVE-2026-5409.html * https://www.suse.com/security/cve/CVE-2026-5653.html * https://www.suse.com/security/cve/CVE-2026-5654.html * https://www.suse.com/security/cve/CVE-2026-5656.html * https://www.suse.com/security/cve/CVE-2026-5657.html * https://www.suse.com/security/cve/CVE-2026-6519.html * https://www.suse.com/security/cve/CVE-2026-6520.html * https://www.suse.com/security/cve/CVE-2026-6521.html * https://www.suse.com/security/cve/CVE-2026-6522.html * https://www.suse.com/security/cve/CVE-2026-6523.html * https://www.suse.com/security/cve/CVE-2026-6524.html * https://www.suse.com/security/cve/CVE-2026-6527.html * https://www.suse.com/security/cve/CVE-2026-6529.html * https://www.suse.com/security/cve/CVE-2026-6530.html * https://www.suse.com/security/cve/CVE-2026-6531.html * https://www.suse.com/security/cve/CVE-2026-6532.html * https://www.suse.com/security/cve/CVE-2026-6533.html * https://www.suse.com/security/cve/CVE-2026-6534.html *https://www.suse.com/security/cve/CVE-2026-6535.html * https://www.suse.com/security/cve/CVE-2026-6537.html * https://www.suse.com/security/cve/CVE-2026-6538.html * https://www.suse.com/security/cve/CVE-2026-6868.html * https://www.suse.com/security/cve/CVE-2026-6869.html . Update for openSUSE solves 33 important issues in Wireshark, ensuring enhanced security and stability.. openSUSE 2026 wireshark update important bug fixes. . Severity: Important. LinuxSecurity.com Team
May 08, 2026
•Important
OpenSUSE
202
security advisorymoderatedenial of serviceopenSUSE Leap 16.0 ClamAV Moderate Denial of Service Advisory 2026-20479-1
An update that solves one vulnerability and has 3 bug fixes can now be installed.. openSUSE security update: security update for clamav ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20479-1 Rating: moderate References: * bsc#1221954 * bsc#1258072 * bsc#1259207 Cross-References: * CVE-2026-20031 CVSS scores: * CVE-2026-20031 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-20031 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has 3 bug fixes can now be installed. Description: This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259207). Non security issue: - Support transactional updates (jsc#PED-14819). Changelog: * Fixed a possible infinite loop when scanning some JPEG files by upgrading affected ClamAV dependency, a Rust image library. * The CVD verification process will now ignore certificate files in the CVD certs directory when the user lacks read permissions. * Freshclam: Fix CLD verification bug with PrivateMirror option. * Upgraded the Rust bytes dependency to a newer version to resolve RUSTSEC-2026-0007 advisory. * Fixed a possible crash caused by invalid pointer alignment on some platforms. Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-487=1 Package List: - openSUSE Leap 16.0: clamav-1.5.2-160000.1.1 clamav-devel-1.5.2-160000.1.1 clamav-docs-html-1.5.2-160000.1.1 clamav-milter-1.5.2-160000.1.1 libclamav12-1.5.2-160000.1.1 libclammspack0-1.5.2-160000.1.1 libfreshclam4-1.5.2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-20031.html . Update for clamav addresses one security issue and includes three critical bug fixes in openSUSE Leap 16.0.. clamav update, openSUSE security, denial of service, security patch, bug fixes. . LinuxSecurity.com Team
Apr 21, 2026
OpenSUSE
89
security advisoryfedoraupdateFedora 44 Spacebar 6.6.4 Messaging App Update 2026-fe3d8d4767
Frameworks 6.25.0 + KDE Plasma 6.6.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fe3d8d4767 2026-04-16 23:40:54.273526+00:00 -------------------------------------------------------------------------------- Name : spacebar Product : Fedora 44 Version : 6.6.4 Release : 1.fc44 URL : https://invent.kde.org/plasma-mobile/spacebar Summary : Messaging app for Plasma Mobile Description : Spacebar is a telepathy-qt based SMS application that primarily targets Plasma Mobile. -------------------------------------------------------------------------------- Update Information: Frameworks 6.25.0 + KDE Plasma 6.6.4 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 10 2026 Steve Cossette - 1:6.6.4-1 - 6.6.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2455469 - Configuring WifI network via Network pane appears to not work https://bugzilla.redhat.com/show_bug.cgi?id=2455469 [ 2 ] Bug #2457573 - FE: KDE Frameworks 6.25.0 + Plasma 6.6.4 https://bugzilla.redhat.com/show_bug.cgi?id=2457573 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fe3d8d4767' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 16, 2026
•Informational
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!