5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2025:20051-1 5 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Confidential GSS krb5 wrap tokens with invalid plaintext Extra Count fields were erroneously accepted during unwrap (bsc#1227186) - CVE-2024-37371: Fixed invalid memory read when processing me…
first Feb 3, 2025 -
Critical max 9.1SUSE-SU-2025:20049-1 7 CVEs
Security update for git
This update for git fixes the following issues: git was updated to 2.45.1: * CVE-2024-32002: recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168) * CVE-2024-32004: arbitrary code executio…
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:03636-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 18, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-46733: btrfs: fix qgroup res…
first Oct 17, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resched…
first Oct 15, 2025 -
Critical max 9.8SUSE-SU-2025:03569-1 4 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3…
first Oct 12, 2025 -
Critical max 9.8SUSE-SU-2025:03548-1 5 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_p…
first Oct 11, 2025 -
Critical max 9.8SUSE-SU-2025:03495-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during sv…
first Oct 8, 2025 -
Critical max 9.8SUSE-SU-2025:03290-1 103 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2024-49996: cifs: Fix buffer overflow wh…
first Sep 22, 2025 -
Critical max 9.1SUSE-SU-2025:03278-1 3 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Sep 19, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695) - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS…
first Aug 27, 2025 -
Critical max 9.1SUSE-SU-2025:02683-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bs…
first Aug 4, 2025 -
Critical max 9.6SUSE-SU-2025:02491-1 12 CVEs
Security update 5.0.5 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#12445…
first Jul 23, 2025 -
Critical max 9.3SUSE-SU-2025:02421-1 3 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues. The following security issues were fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac:…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:02416-1 9 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has be…
first Jul 21, 2025 -
Critical max 9.1SUSE-SU-2025:02415-1 6 CVEs
Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_237 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:02339-1 13 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: This is the Firefox Extended Support Release 140.0esr ESR Major changes: General: - Reader View now has an enhanced Text and Layout menu with new options for character spa…
first Jul 17, 2025 -
Critical max 9.1SUSE-SU-2025:02314-1 5 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. (bsc#1244554) - CVE-2025-49796: Fixed type confusion which could lead to denial of service. (bsc#1244557) - CVE-2025-49795…
first Jul 15, 2025 -
Critical max 9.8SUSE-SU-2025:02254-1 253 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: c…
first Jul 8, 2025 -
Critical max 9.4SUSE-SU-2025:02057-1 5 CVEs
Security update for python311
This update for python311 fixes the following issues: python311 was updated from version 3.11.10 to 3.11.13: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273). * CVE-2024-12718, …
first Jun 21, 2025 -
Critical max 9.1SUSE-SU-2023:1838-1 1 CVE
Security update for python-crcmod, python-cryptography, python-cryptography-vectors
This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) …
first Apr 13, 2023 -
Critical max 9.8SUSE-SU-2025:01640-1 40 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48933: netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1229621). - CVE-2022-49110: netfilter:…
first May 21, 2025 -
Critical max 9.3SUSE-SU-2020:0640-1 14 CVEs
Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, opens
This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana…
first Mar 11, 2020 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-36028: …
first Aug 25, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-3602…
first Aug 25, 2025 -
Critical max 9.3SUSE-SU-2025:20517-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) -…
first Jul 30, 2025 -
Critical max 9.6SUSE-SU-2025:20487-1 12 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE…
first Jul 23, 2025 -
Critical max 9.1SUSE-SU-2025:20418-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-40896: Fixed XXE vulnerability (bsc#1234812)
first Jun 13, 2025 -
Critical max 9.8SUSE-SU-2025:20397-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900) - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-20…
first Jun 10, 2025 -
Critical max 9.0SUSE-SU-2025:20375-1 16 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750) - CVE-2025-32050: Fixed Integer overflow in append_param_quoted (bsc#1240752) - CVE-2025-32051: …
first May 29, 2025 -
Critical max 9.8SUSE-SU-2025:20370-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916)
first May 22, 2025 -
Critical max 9.8SUSE-SU-2025:20355-1 96 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: us…
first May 23, 2025 -
Critical max 9.8SUSE-SU-2025:20354-1 96 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: use O…
first May 23, 2025 -
Critical max 9.8SUSE-SU-2025:20344-1 96 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: us…
first May 23, 2025 -
Critical max 9.8SUSE-SU-2025:20342-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916)
first May 22, 2025 -
Critical max 9.1SUSE-SU-2025:20331-1 1 CVE
Security update for python-httpcore, python-h11
This update for python-httpcore, python-h11 fixes the following issues: python-h11: - Update 0.16.0: * CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872) - 0.15.0: * Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) e…
first May 20, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397:…
first Mar 28, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: ne…
first Mar 27, 2025 -
Critical max 9.8SUSE-SU-2025:20223-1 6 CVEs
Security update for rsync
This update for rsync fixes the following issues: - Bump protocol version to 32 - make it easier to show server is patched. - Fix FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED - Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic…
first Feb 7, 2025 -
Critical max 10.0SUSE-SU-2025:20190-1 272 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-26708:…
first Apr 17, 2025