5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2025:3764-1 7 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2025:3759-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: * Prevent leaks during pkcs12 decoding. * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates Update …
first Oct 23, 2025 -
Critical max 10.0SUSE-SU-2025:3677-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed vfs_streams_xattr uninitialized memory write (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS Server Hook Script (bsc#1251280).
first Oct 20, 2025 -
Critical max 10.0SUSE-SU-2025:3676-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280). Update to 4.21.8: * netr_LogonSam…
first Oct 20, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
Critical max 9.8SUSE-SU-2025:21147-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…
first Nov 26, 2025 -
Critical max 9.8SUSE-SU-2025:21140-1 3 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092). - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093). - CVE…
first Nov 25, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
Critical max 9.6SUSE-SU-2025:21152-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Fixed Improper Neutralization of Escape, Meta, or Contr…
first Nov 27, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
Critical max 9.8SUSE-SU-2025:21080-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…
first Nov 26, 2025 -
Critical max 9.8SUSE-SU-2025:21056-1 191 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: tra…
first Nov 13, 2025 -
Critical max 10.0SUSE-SU-2025:21026-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: Update to 4.22.5: * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280). * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - Relax samba-gpupdate req…
first Nov 18, 2025 -
Critical max 9.8SUSE-SU-2025:20919-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_11
This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376) - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right user…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20917-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20916-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20915-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20914-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20913-1 9 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: f…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20906-1 7 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20889-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_10
This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376) - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20890-1 10 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384) - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20887-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20885-1 9 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20884-1 10 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384) - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20883-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_8
This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20878-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20877-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20873-1 9 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: f…
first Oct 24, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prev…
first Oct 15, 2025 -
Critical max 9.8SUSE-SU-2025:20836-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20835-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2025-38089: sunrpc: handle …
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20831-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20826-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2024-53168: sunrpc: fix …
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20808-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2025-38089: sunrpc: handle …
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20807-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2024-53168: sunrpc: fix one…
first Oct 7, 2025 -
Critical max 9.3SUSE-SU-2025:20541-1 9 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow (bsc#1234854) - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885) - CVE-2024-53173: NFSv4.0:…
first Aug 1, 2025 -
Critical max 9.6SUSE-SU-2025:20504-1 13 CVEs
Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle
This update fixes the following issues: golang-github-prometheus-node_exporter: - Security issues fixed: - CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a hostname component (bsc#1238686) - Other bug…
first Jul 23, 2025 -
Critical max 9.3
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274) - CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)
first Jul 15, 2025 -
Critical max 10.0SUSE-SU-2025:20421-1 193 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-46713: ka…
first Jun 16, 2025