5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2025:20196-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: - Update to version 3.17.2 (bsc#1238688, CVE-2025-22870): * Updating to 0.37.0 for x/net * build(deps): bump the k8s-io group with 7 updates - Update to version 3.17.1: * merge null child chart objects * build(…
first Apr 22, 2025 -
Critical max 9.8
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-45016: Fixed netem: fix return value if duplicate enqueue fails (bsc#1230998) - CVE-2024-47684: Fixed tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993) …
first Apr 17, 2025 -
Critical max 9.8
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-202…
first Apr 17, 2025 -
Critical max 9.8SUSE-SU-2025:20909-1 10 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384) - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - …
first Oct 24, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: P…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2025:20095-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fix a single byte buffer overflow (bsc#1233282).
first Feb 3, 2025 -
Critical max 9.8SUSE-SU-2025:20025-1 10 CVEs
Security update for python311, python-rpm-macros
This update for python311, python-rpm-macros fixes the following issues: python311: - CVE-2024-0450: Fixed zipfile module vulnerability with "quoted-overlap" zipbomb (bsc#1221854) - CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448) - C…
first Feb 3, 2025 -
Critical max 9.1SUSE-SU-2025:20564-1 6 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-6021: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 [bsc#1244580] - CVE-2025-6170: stack buffer overflow may lead to a crash [bsc#1244700] - CVE-2025-7425: Heap Use…
first Aug 21, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). - CVE-2024-36348, CVE-…
first Aug 27, 2025 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability …
first Aug 12, 2025 -
Critical max 9.1SUSE-SU-2025:02685-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bs…
first Aug 4, 2025 -
Critical max 9.8SUSE-SU-2025:02588-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2023-52923: netfilter: nf…
first Aug 1, 2025 -
Critical max 9.6SUSE-SU-2025:02534-1 12 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE…
first Jul 28, 2025 -
Critical max 9.8SUSE-SU-2025:02529-1 27 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: MozillaFirefox is updated to the 140ESR series. Firefox Extended Support Release 140.0esr ESR: * General - Reader View now has an enhanced Text and Layout menu with new op…
first Jul 25, 2025 -
Critical max 9.6SUSE-SU-2025:02502-1 12 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE…
first Jul 23, 2025 -
Critical max 9.8SUSE-SU-2025:02476-1 15 CVEs
Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16 * Important Salt Security Update * Added support for SUSE Linux Enterprise 15 SP7 as a client using the Salt Bundle * CVE Fixed CVE-2025-23392, CVE-2025-23393, …
first Jul 23, 2025 -
Critical max 9.8SUSE-SU-2025:02475-1 4 CVEs
Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues: cobbler: - Prevent crash during Cobbler startup on NFS environments (bsc#1240666) - Synchronize cobbler add and sync actions (bsc#1233371) - Exclude disabled profiles from buildiso gen (bsc#1230908) grafana-formula: - V…
first Jul 23, 2025 -
Critical max 9.1SUSE-SU-2025:02434-1 9 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has b…
first Jul 21, 2025 -
Critical max 9.1SUSE-SU-2025:02428-1 8 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has be…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:02422-1 7 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…
first Jul 21, 2025 -
Critical max 9.3SUSE-SU-2025:02420-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extende…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:02390-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended c…
first Jul 19, 2025 -
Critical max 9.3SUSE-SU-2025:02369-1 1 CVE
Security update for FastCGI
This update for FastCGI fixes the following issues: - CVE-2025-23016: Fixed integer overflow in FastCGI fcgi2 library (bsc#1243325)
first Jul 18, 2025 -
Critical max 9.8SUSE-SU-2025:02368-1 5 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.12 (MFSA 2025-55, bsc#1244670): - CVE-2025-6424: Use-after-free in FontFaceSet (bmo#1966423) - CVE-2025-6425: The WebCompat WebExtension shipped exposed a persist…
first Jul 18, 2025 -
Critical max 9.1SUSE-SU-2025:02355-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. (bsc#1244554) - CVE-2025-49796: Fixed type confusion which could lead to denial of service. (bsc#1244557) - CVE-2025-6170:…
first Jul 17, 2025 -
Critical max 9.8SUSE-SU-2025:02333-1 253 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: chec…
first Jul 16, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/…
first Jul 15, 2025 -
Critical max 9.8SUSE-SU-2025:02307-1 253 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: check v…
first Jul 14, 2025 -
Critical max 9.8SUSE-SU-2025:02201-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054). - CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055). Other bugfixes: - Fix…
first Jul 2, 2025 -
Critical max 9.8SUSE-SU-2025:02200-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054). - CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055).
first Jul 2, 2025 -
Critical max 9.8SUSE-SU-2025:02126-1 11 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-fre…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2025:02123-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to MozillaFirefox 128.12.0 (MFSA 2025-23, bsc#1244670): - CVE-2025-6424: Use-after-free in FontFaceSet - CVE-2025-6425: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2025:02119-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054). - CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055). Other bugfixes: - Fix…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2025:02106-1 9 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-f…
first Jun 25, 2025 -
Critical max 9.0SUSE-SU-2025:01802-1 8 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#124342…
first Jun 3, 2025 -
Critical max 9.0SUSE-SU-2025:01794-1 8 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423…
first Jun 2, 2025 -
Critical max 9.8SUSE-SU-2025:01620-1 40 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48933: netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1229621). - CVE-2022-49110: netfilter: co…
first May 21, 2025 -
Critical max 9.8SUSE-SU-2025:01537-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.40 - CVE-2025-31650: invalid priority field values should be ignored (bsc#1242008) - CVE-2025-31651: Better handling of URLs with literal ';' and '?' (bsc#1242009) Full changelog: http…
first May 29, 2025 -
Critical max 9.8SUSE-SU-2025:20905-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2025:20891-1 10 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384) - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)…
first Oct 24, 2025