5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2026:0180-1 9 CVEs
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: ne…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2026:0153-1 13 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: MFSA 2026-05 (bsc#1256340): - CVE-2026-0877: Mitigation bypass in the DOM in Security component - CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphics in CanvasWebGL …
first Jan 19, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476…
first Jan 17, 2026 -
Critical max 10.0SUSE-SU-2026:0142-1 31 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454 * GO-2…
first Jan 17, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3968…
first Jan 17, 2026 -
Critical max 9.8SUSE-SU-2026:0122-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due to incorrect …
first Jan 14, 2026 -
Critical max 9.8SUSE-SU-2025:4517-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi…
first Dec 23, 2025 -
Critical max 9.0SUSE-SU-2025:4514-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555)
first Dec 23, 2025 -
Critical max 9.8SUSE-SU-2025:4512-1 4 CVEs
Security update for mozjs52
This update for mozjs52 fixes the following issues: - CVE-2024-45491: Fixed integer overflow in dtdCopy (bsc#1230037) - CVE-2024-50602: Fixed DoS via XML_ResumeParser (bsc#1232599) - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart (bsc#123…
first Dec 23, 2025 -
Critical max 9.8SUSE-SU-2025:4140-1 190 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph: Fix t…
first Nov 19, 2025 -
Critical max 9.6SUSE-SU-2025:4103-1 3 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.48 - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) - CVE-2025-55754: Fixed improper neutralization of escape, meta, or control…
first Nov 14, 2025 -
Critical max 9.1SUSE-SU-2025:4100-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via the '_connector' keyword (bsc#1252926)
first Nov 14, 2025 -
Critical max 9.1SUSE-SU-2026:20122-1 6 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd…
first Jan 22, 2026 -
Critical max 10.0SUSE-SU-2026:0403-1 76 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260205T172317 2026-02-05T17:23:17Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4337 CVE-2025-68121 * GO-2026-4357 CVE-2026…
first Feb 6, 2026 -
Critical max 9.8SUSE-SU-2026:0315-1 395 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328). - CVE-2025-38728: smb3: fix for slab out of bounds…
first Jan 28, 2026 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: …
first Jan 17, 2026 -
Critical max 9.8SUSE-SU-2026:0191-1 10 CVEs
Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.173 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2026:0012-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807). - CVE-2025-58142: NULL pointer dereference in the Viridian interfac…
first Jan 5, 2026 -
Critical max 9.8SUSE-SU-2025:4396-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551). - MFSA 2025-94 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorr…
first Dec 15, 2025 -
Critical max 9.8SUSE-SU-2025:4149-1 196 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix n…
first Nov 20, 2025 -
Critical max 9.8SUSE-SU-2026:20473-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676:…
first Feb 19, 2026 -
Critical max 9.0SUSE-SU-2026:0558-1 2 CVEs
Security update for libnvidia-container
This update for libnvidia-container fixes the following issues: Update to version 1.18.0. Security issues fixed: - CVE-2024-0132: time-of-check time-of-use (TOCTOU) race condition in default configuration via specifically crafted container image (bsc#1231033)…
first Feb 16, 2026 -
Critical max 9.9
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4249 CVE-2025-68120 CVE-2025-68120 * GO-2025-4…
first Jan 6, 2026 -
Critical max 9.8SUSE-SU-2026:0195-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)
first Jan 21, 2026 -
Critical max 9.8SUSE-SU-2026:0184-1 9 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: n…
first Jan 20, 2026 -
Critical max 9.8SUSE-SU-2025:4424-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551). - MFSA 2025-94 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorr…
first Dec 17, 2025 -
Critical max 9.8SUSE-SU-2025:4422-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: target: i…
first Dec 17, 2025 -
Critical max 9.8SUSE-SU-2025:4397-1 10 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.6 (bsc#1254551). - MFSA 2025-96 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorrect boundary co…
first Dec 15, 2025 -
Critical max 9.8SUSE-SU-2025:4393-1 69 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: target: i…
first Dec 15, 2025 -
Critical max 9.8SUSE-SU-2025:4189-1 137 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (bsc#1250764). - CVE-2022-48631: ext4: fix bug in extents parsing w…
first Nov 24, 2025 -
Critical max 9.0SUSE-SU-2025:4187-1 9 CVEs
Security update for nvidia-container-toolkit
This update for nvidia-container-toolkit fixes the following issues: - Update to version 1.18.0: - This is a major release and includes the following high-level changes: - The default mode of the NVIDIA Container Runtime has been updated to make use of a just…
first Nov 24, 2025 -
Critical max 9.8SUSE-SU-2025:4090-1 4 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094) - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouver…
first Nov 13, 2025 -
Critical max 9.8SUSE-SU-2025:4068-1 3 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) - CVE-2025-47151: Fixed type confusion vulnerability in…
first Nov 12, 2025 -
Critical max 10.0SUSE-SU-2025:4029-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)
first Nov 10, 2025 -
Critical max 10.0SUSE-SU-2025:4026-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)
first Nov 10, 2025 -
Critical max 9.8SUSE-SU-2025:4006-1 8 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. * changed: Account Hub is now disabled by default for second email account (bmo#1992027) * changed: Flatpak runtime has been updated to Freedesktop SDK 24.0…
first Nov 10, 2025 -
Critical max 9.8SUSE-SU-2025:3905-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-43343: Fixed an issue where processing maliciously crafted web content may lead to an unexpected process crash (bsc#1251975) - CVE-2025-43272: Fixed an issue where processing maliciously craft…
first Nov 1, 2025 -
Critical max 10.0SUSE-SU-2025:3902-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed proxy auth data visible to scripts (bsc#1252281).
first Oct 31, 2025 -
Critical max 9.8SUSE-SU-2025:3843-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls (bsc#1251271, XSA-475) - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian …
first Oct 28, 2025 -
Critical max 9.8SUSE-SU-2025:3808-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.4.0 ESR (bsc#1251263). - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: Out of bounds read/write in a privileged …
first Oct 27, 2025