5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2025:20818-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20669-1 96 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2025-38006: net: mctp: Do not…
first Sep 5, 2025 -
Critical max 9.3SUSE-SU-2025:20545-1 9 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow (bsc#1234854) - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885) - CVE-2024-53173: NFSv4…
first Jul 30, 2025 -
Critical max 9.3SUSE-SU-2025:20526-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) - CV…
first Aug 1, 2025 -
Critical max 9.3SUSE-SU-2025:20525-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) - CV…
first Aug 1, 2025 -
Critical max 9.3
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274) - CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)
first Jul 10, 2025 -
Critical max 9.0SUSE-SU-2025:20446-1 16 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750) - CVE-2025-32050:Fixed Integer overflow in append_param_quoted (bsc#1240752) - CVE-2025-32051:Fi…
first Jun 25, 2025 -
Critical max 10.0SUSE-SU-2025:20419-1 174 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-46713: kabi …
first Jun 15, 2025 -
Critical max 9.8SUSE-SU-2025:20388-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900) - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-20…
first Jun 10, 2025 -
Critical max 9.8SUSE-SU-2025:20311-1 10 CVEs
Security update for expat
This update for expat fixes the following issues: Version update to 2.7.1: Bug fixes: #980 #989 Restore event pointer behavior from Expat 2.6.4 (that the fix to CVE-2024-8176 changed in 2.7.0); affected API functions are: - XML_GetCurrentByteCount - XML_GetCu…
first May 13, 2025 -
Critical max 10.0SUSE-SU-2025:20260-1 272 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-26708:…
first Apr 17, 2025 -
Critical max 10.0SUSE-SU-2025:20259-1 4 CVEs
Security update for docker
This update for docker fixes the following issues: - This update includes fixes for: * CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324) * CVE-2023-47108: Fixed otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to …
first Mar 31, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register sp…
first Mar 27, 2025 -
Critical max 9.8SUSE-SU-2025:20206-1 75 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757). - CVE-2024-…
first Apr 25, 2025 -
Critical max 9.8SUSE-SU-2025:20207-1 10 CVEs
Security update for expat
This update for expat fixes the following issues: Version update to 2.7.1: * Bug fixes: * Restore event pointer behavior from Expat 2.6.4 (that the fix to CVE-2024-8176 changed in 2.7.0); affected API functions are: - XML_GetCurrentByteCount - XML_GetCurrentB…
first Apr 29, 2025 -
Critical max 9.8
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-2024-4…
first Apr 17, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397:…
first Mar 28, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill…
first Mar 27, 2025 -
Critical max 9.8SUSE-SU-2025:20122-1 6 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2024-12084: Fixed Heap Buffer Overflow in Checksum Parsing (bsc#1234100). - CVE-2024-12085: Fixed Info Leak via uninitialized Stack contents defeating ASLR (bsc#1234101). - CVE-2024-12086: Fixed server l…
first Feb 4, 2025 -
Critical max 10.0SUSE-SU-2025:20073-1 162 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52752: smb: client: fix use…
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:20044-1 383 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. This release includes the first live patch. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1…
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:20014-1 5 CVEs
Security update for openssl-3, libpulp, ulp-macros
This update for openssl-3, libpulp, ulp-macros fixes the following issues: openssl-3: - CVE-2024-6119: possible denial of service in X.509 name checks (bsc#1229465) - CVE-2024-5535: SSL_select_next_proto buffer overread (bsc#1227138) - CVE-2024-4741: Fixed a …
first Feb 3, 2025 -
Critical max 9.1SUSE-SU-2025:20010-1 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) - Update to GNU wget 1.24.5: * Fix how subdomain matches are checked for HSTS. * Wget will now also parse the src…
first Feb 3, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41013: xfs: do not walk off …
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:03650-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_5 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that cal…
first Oct 18, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-39782: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526). - CVE-2025-39773: ne…
first Oct 15, 2025 -
Critical max 9.8SUSE-SU-2025:03575-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-22023: usb: xhci: Don't skip on Stopped - Leng…
first Oct 12, 2025 -
Critical max 9.8SUSE-SU-2025:03571-1 5 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2024-53168: sunrpc: fix one UAF issue caused by …
first Oct 12, 2025 -
Critical max 9.8SUSE-SU-2025:03557-1 5 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_83 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pe…
first Oct 11, 2025 -
Critical max 9.8SUSE-SU-2025:03514-1 5 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pe…
first Oct 9, 2025 -
Critical max 9.8SUSE-SU-2025:03494-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2024-53168: sunrpc: fix one UAF issue caused by …
first Oct 8, 2025 -
Critical max 9.8SUSE-SU-2025:03465-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2024-53168: sunrpc: fix one UAF issue caused by s…
first Oct 7, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824). - CVE-2024-53177: …
first Sep 26, 2025 -
Critical max 9.8SUSE-SU-2025:03382-1 103 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2024-49996: cifs: Fix buffer overflow…
first Sep 26, 2025 -
Critical max 9.8SUSE-SU-2025:03172-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807). - CVE-2025-58142: NULL pointer dereference in the Viridian interfac…
first Sep 11, 2025 -
Critical max 9.8SUSE-SU-2025:02912-1 31 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250814T182633 2025-08-14T18:26:33Z (jsc#PED-11136) Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3765 CVE-2024-44906 GHSA-h4h6-vccr-44h2 * GO-20…
first Aug 19, 2025 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability …
first Aug 12, 2025 -
Critical max 9.1SUSE-SU-2025:02581-1 2 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Jul 31, 2025 -
Critical max 9.6SUSE-SU-2025:02501-1 12 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE…
first Jul 23, 2025 -
Critical max 9.6SUSE-SU-2025:02500-1 12 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE…
first Jul 23, 2025