12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2026:0155-1 8 CVEs
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242). - CVE…
first Jan 19, 2026 -
High max 7.5SUSE-SU-2026:0016-1 2 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-12765: insufficient checks in the LDAP authentication flow allow a for bypass of TLS certificate validation that can lead to the stealing of bind credentials and the altering of directory respons…
first Jan 5, 2026 -
High max 7.0SUSE-SU-2025:4520-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed Directory Traversal and Remote Code Execution (bsc#1254313)
first Dec 24, 2025 -
High max 7.0SUSE-SU-2025:4493-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to Path Traversal and Remote Code Execution (bsc#1254313) Other fixes: - Update to 10.6.24
first Dec 19, 2025 -
High max 7.6SUSE-SU-2025:4457-1 5 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-alertmanager: - Update to version 0.28.1 (jsc#PED-13285): * Improved performance of inhibition rules when using Equal labels. * Improve the documentation on escaping in UTF-8 matchers. * Update …
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4448-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4445-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Dec 17, 2025 -
High max 7.8SUSE-SU-2025:4413-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-13499: Fixed Kafka dissector crash due to a malformed packet (bsc#1254108). - CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows a denial of service (bsc#1254472).
first Dec 16, 2025 -
High max 8.8SUSE-SU-2025:4227-1 3 CVEs
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…
first Nov 25, 2025 -
High max 7.8SUSE-SU-2025:4224-1 5 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - CVE-2025-61662: F…
first Nov 25, 2025 -
High max 8.8SUSE-SU-2026:20373-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…
first Feb 16, 2026 -
High max 7.8SUSE-SU-2026:0736-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 2, 2026 -
High max 7.5SUSE-SU-2026:0703-1 6 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418). - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422). - CVE-2025-32049: denial of Servic…
first Feb 28, 2026 -
High max 8.1SUSE-SU-2026:0490-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.13 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunr…
first Feb 13, 2026 -
High max 7.5SUSE-SU-2026:0295-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion (bsc#1256848) - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks tha…
first Jan 26, 2026 -
High max 8.8SUSE-SU-2025:4530-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53659: iavf: Fix out-of-bounds when setting chann…
first Dec 29, 2025 -
High max 8.2SUSE-SU-2026:0123-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers (bsc#1254876).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2026:0022-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0010-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 5, 2026 -
High max 8.8SUSE-SU-2025:4515-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083). - CVE-2022-50368: drm/ms…
first Dec 23, 2025 -
High max 7.6SUSE-SU-2025:4482-1 7 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 11.5.5 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Dropped experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4477-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4474-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4478-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4476-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4475-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4467-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.6SUSE-SU-2025:4458-1 4 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 1.0.0 * Reboot on salt key timeout (bsc#1237495) * Fixed parsing files with space in the name (bsc#1252100) grafana was updated from version 11.5.5 to 11.5.10: - Security issues fixe…
first Dec 18, 2025 -
High max 7.7SUSE-SU-2025:4442-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087…
first Dec 17, 2025 -
High max 7.0SUSE-SU-2025:4438-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to Path Traversal and Remote Code Execution (bsc#1254313) Other fixes: - Updated to 11.8.5 - Added %license tags to license files (bsc#1252162)…
first Dec 17, 2025 -
High max 7.5SUSE-SU-2025:4427-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Dec 17, 2025 -
High max 7.5SUSE-SU-2025:4429-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary memory disclosure on 32-bit systems (bsc#1254820).
first Dec 17, 2025 -
High max 7.5SUSE-SU-2025:4428-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Dec 17, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Dec 16, 2025 -
High max 8.5SUSE-SU-2025:4330-1 6 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Dec 9, 2025 -
High max 7.8SUSE-SU-2025:4282-1 2 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-202…
first Nov 27, 2025 -
High max 8.8SUSE-SU-2025:4281-1 1 CVE
Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.173 fixes one security issue The following security issue was fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983).
first Nov 27, 2025 -
High max 7.5SUSE-SU-2025:4264-1 8 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905) - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930) - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3…
first Nov 26, 2025 -
High max 7.8SUSE-SU-2025:4262-1 3 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…
first Nov 26, 2025