5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2025:20154-1 19 CVEs
Security update for python311
This update for python311 fixes the following issues: - Skip PGO with %want_reproducible_builds (bsc#1239210) - CVE-2025-0938: Disallows square brackets ([ and ]) in domain names for parsed URLs (bsc#1236705). - Configure externally_managed with a bcond (bsc#…
first Mar 19, 2025 -
Critical max 9.1SUSE-SU-2025:20116-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-40896: Fixed XML external entity vulnerability (bsc#1234812)
first Feb 3, 2025 -
Critical max 10.0SUSE-SU-2025:20110-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/r…
first Feb 3, 2025 -
Critical max 10.0SUSE-SU-2025:20107-1 3 CVEs
Security update for buildkit
This update for buildkit fixes the following issues: - Update to version 0.12.5: * update runc to v1.1.12 * exec: add extra validation for submount sources (fixes CVE-2024-23651, bsc#1219267) * oci: fix error handling on submount calls * executor: recheck mou…
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:20039-1 1 CVE
Security update for keepalived
This update for keepalived fixes the following issues: - CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
first Feb 3, 2025 -
Critical max 9.1SUSE-SU-2025:1430-1 1 CVE
Security update for python-h11
This update for python-h11 fixes the following issues: - CVE-2025-43859: leniency when parsing of line terminators in chunked-coding message bodies can lead to request smuggling. (bsc#1241872)
first May 2, 2025 -
Critical max 9.8SUSE-SU-2025:03646-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_8 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that c…
first Oct 18, 2025 -
Critical max 9.8SUSE-SU-2025:03638-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 18, 2025 -
Critical max 10.0SUSE-SU-2025:03604-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).
first Oct 15, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resched…
first Oct 15, 2025 -
Critical max 10.0SUSE-SU-2025:03545-1 53 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: Note this update contains a already fixed references mostly. - Remove git-core recommends on SLE to avoid pulling it in unnecessary. (bsc#1250508) This feature is mostly intended for developers ('docke…
first Oct 11, 2025 -
Critical max 9.8SUSE-SU-2025:03470-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_39 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during sv…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:03469-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_20 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2024-53168: sunrpc: fix one UAF issue caused by …
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:03378-1 3 CVEs
Security update for luajit
This update for luajit fixes the following issues: - CVE-2024-25176: Fixed stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c (bsc#1246077) - CVE-2024-25177: Fixed unsinking of IR_FSTORE for NULL metatable (bsc#1246078) - CVE-2024-25178: Fixed out-of…
first Sep 26, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110). - CVE-2022-50116: kernel: tty: n_gsm: f…
first Sep 24, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695). - CVE-2024-36028: mm/hugetlb: fix DEBU…
first Aug 28, 2025 -
Critical max 9.1SUSE-SU-2025:02684-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bs…
first Aug 4, 2025 -
Critical max 9.1SUSE-SU-2025:02682-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bs…
first Aug 4, 2025 -
Critical max 9.6SUSE-SU-2025:02499-1 12 CVEs
Security update 5.0.5 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#12445…
first Jul 23, 2025 -
Critical max 9.6SUSE-SU-2025:02492-1 12 CVEs
Security update 5.0.5 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#12445…
first Jul 23, 2025 -
Critical max 9.8SUSE-SU-2025:02436-1 10 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has b…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:02131-1 8 CVEs
Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acce…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2025:02124-1 8 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-f…
first Jun 26, 2025 -
Critical max 10.0SUSE-SU-2025:02000-1 171 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-46713: kabi fix for perf/aux: …
first Jun 18, 2025 -
Critical max 9.8SUSE-SU-2025:01995-1 89 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (bsc#1237981). - CVE-2022-49139: Bluetooth: fix null ptr deref o…
first Jun 18, 2025 -
Critical max 10.0SUSE-SU-2025:01972-1 119 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: use OPTION_MP…
first Jun 17, 2025 -
Critical max 9.0SUSE-SU-2025:01801-1 8 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423…
first Jun 2, 2025 -
Critical max 9.8SUSE-SU-2025:01614-1 170 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: use OPTION_MPTCP…
first May 21, 2025 -
Critical max 9.8SUSE-SU-2025:20841-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20834-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2024-53168: sunrpc: fix one…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20832-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20827-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2025-38089: sunrpc: hand…
first Oct 7, 2025 -
Critical max 9.8SUSE-SU-2025:20653-1 96 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2025-38006: net: mctp: Do not…
first Sep 5, 2025 -
Critical max 9.3SUSE-SU-2025:20540-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) - CV…
first Aug 1, 2025 -
Critical max 9.4SUSE-SU-2025:20539-1 7 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705). Update to 3.11.13: - Security - gh-135034: Fixes multiple issues that …
first Aug 1, 2025 -
Critical max 9.4SUSE-SU-2025:20492-1 11 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705). Update to 3.11.13: - Security - gh-135034: Fixes multiple issues that …
first Jul 11, 2025 -
Critical max 9.8SUSE-SU-2025:20374-1 16 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS. (bsc#1243273) Update to 3.11.12: - gh-105704: When using urllib.parse.urlsplit() and urllib.parse.urlparse() hos…
first Jun 3, 2025 -
Critical max 9.8SUSE-SU-2025:20366-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916)
first May 28, 2025 -
Critical max 9.8SUSE-SU-2025:20350-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916)
first May 28, 2025 -
Critical max 9.8SUSE-SU-2025:20284-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-56600: net: inet6: Fixed dangling sk pointer in inet6_create() (bsc#1235218). - CVE-2024-57882: mptcp: Fixed TCP options overflow (bsc#1235916).
first Apr 17, 2025