5,630 results · Clear filters · Feed
-
Critical max 10.0
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT (bsc#1239302) Other fixes: - Update to Tomcat 10.1.39 * Fixes: + launch with java 17 (bsc#1239676) * Catalina …
first Mar 26, 2025 -
Critical max 9.8SUSE-SU-2024:4007-1 3 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.14 * Ubuntu 24.04 support as client * Product migration from RHEL and Clones to SUSE Liberty Linux * POS image templates now produce compressed images * Date forma…
first Nov 18, 2024 -
Critical max 9.8SUSE-SU-2024:4006-1 3 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: cobbler: - Security issues fixed: * CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332) - Other bugs fixed: * Increase start timeout for cobblerd unit (bsc#1219450) * Provide sync_single_system…
first Nov 18, 2024 -
Critical max 9.8SUSE-SU-2025:1325-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content (bsc#1240962) - CVE-2025-24208: permissions issue may lead to a c…
first Apr 16, 2025 -
Critical max 9.1SUSE-SU-2024:2322-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid le…
first Jul 8, 2024 -
Critical max 9.8SUSE-SU-2024:1856-1 4 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec (bsc#1223353). - CVE-2024-32659: Fixed out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` (bsc#1223346) - CVE-2024-32660: Fi…
first May 30, 2024 -
Critical max 9.4SUSE-SU-2024:2723-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_55 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-26923: Fixed false-positive lockdep splat f…
first Aug 2, 2024 -
Critical max 9.4SUSE-SU-2024:2437-1 4 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 12, 2024 -
Critical max 9.4SUSE-SU-2024:2358-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 9, 2024 -
Critical max 9.2SUSE-SU-2025:1012-1 6 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1217: Fixed header parser of `http` stream wrapper not handling folded headers (bsc#1239664) - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) - …
first Mar 25, 2025 -
Critical max 9.8SUSE-SU-2024:0116-1 4 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (bsc#1218582) - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory acc…
first Jan 16, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590). - CVE-2024-43854: Initialize integrity buffer to z…
first Dec 17, 2024 -
Critical max 9.4SUSE-SU-2024:3334-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-27398: Fixed use-after-free bugs caused by sc…
first Sep 19, 2024 -
Critical max 9.8SUSE-SU-2024:4197-1 11 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 5, 2024 -
Critical max 9.8SUSE-SU-2023:3837-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575): Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683). - CVE-2023-5169: Out-of-bounds…
first Sep 27, 2023 -
Critical max 9.8SUSE-SU-2023:4529-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).
first Nov 22, 2023 -
Critical max 9.1SUSE-SU-2023:4046-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) - CVE-2023-42669: Fixed a bug in 'rpcecho' development server which allows Denial of Service via sleep() …
first Oct 11, 2023 -
Critical max 10.0SUSE-SU-2024:2802-1 118 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600). - CVE-2023-52435: net: prevent m…
first Aug 7, 2024 -
Critical max 9.8SUSE-SU-2023:2950-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were pre…
first Jul 24, 2023 -
Critical max 9.1SUSE-SU-2023:3709-1 5 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284). - CVE-2023-41358: Fixed crash in bgpd/bgp_packet.c (bsc#1214735). - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgp_packe…
first Sep 20, 2023 -
Critical max 10.0SUSE-SU-2023:4836-1 3 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_112 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 14, 2023 -
Critical max 10.0SUSE-SU-2023:4796-1 2 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_151 fixes several issues. The following security issues were fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privileg…
first Dec 13, 2023 -
Critical max 10.0SUSE-SU-2023:4343-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - …
first Nov 2, 2023 -
Critical max 9.8SUSE-SU-2023:1819-1 12 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 102.10.0 ESR (bsc#1210212) - CVE-2023-29531: Out-of-bound memory access in WebGL on macOS - CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass - CVE-2023-…
first Apr 11, 2023 -
Critical max 9.8SUSE-SU-2024:2203-1 407 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). - CVE-20…
first Jun 25, 2024 -
Critical max 9.8SUSE-SU-2024:3694-1 23 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.4SUSE-SU-2024:3375-1 13 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF…
first Sep 23, 2024 -
Critical max 9.8SUSE-SU-2024:2850-1 15 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 8, 2024 -
Critical max 9.8SUSE-SU-2024:2446-1 13 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2024:1759-1 6 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 22, 2024 -
Critical max 9.8SUSE-SU-2024:1729-1 5 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound b…
first May 21, 2024 -
Critical max 9.8SUSE-SU-2024:1696-1 6 CVEs
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_138 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 20, 2024 -
Critical max 9.8SUSE-SU-2024:1677-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 17, 2024 -
Critical max 9.8SUSE-SU-2022:4247-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270): - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen n…
first Nov 28, 2022 -
Critical max 9.8SUSE-SU-2023:3401-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)
first Aug 23, 2023 -
Critical max 9.8SUSE-SU-2022:1927-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027) - CVE-2022-31736: Cross-Origin resource's length leaked - CVE-2022-31737: Heap buffer overflow in WebGL - CVE-2022-31738: Brows…
first Jun 2, 2022 -
Critical max 9.1SUSE-SU-2023:0074-1 1 CVE
Security update for php8
This update for php8 fixes the following issues: - Updated to version 8.0.27: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958). Non-security fixes: - Fixed a NULL pointer dereference with -w/-s options. - Fixed a…
first Jan 11, 2023 -
Critical max 9.8SUSE-SU-2022:4005-1 2 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bug#81738) (bsc#1204577). - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont() (bug#81739) (bsc#12…
first Nov 15, 2022 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 10, 2022 -
Critical max 9.1SUSE-SU-2022:2338-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_str…
first Jul 8, 2022