12,602 results · Clear filters · Feed
-
High max 7.3SUSE-SU-2025:3872-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3865-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3864-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 8.1SUSE-SU-2025:3857-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 29, 2025 -
High max 8.1SUSE-SU-2025:3856-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 29, 2025 -
High max 7.8SUSE-SU-2025:3734-1 6 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_83 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure th…
first Oct 22, 2025 -
High max 7.5SUSE-SU-2025:3706-1 2 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.7. - Fixes in 3.13.7: * gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl…
first Oct 21, 2025 -
High max 7.8SUSE-SU-2025:3705-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 21, 2025 -
High max 7.8SUSE-SU-2025:3704-1 6 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 21, 2025 -
High max 7.5SUSE-SU-2025:3682-1 10 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: go1.24.9 (released 2025-10-13) includes fixes to the crypto/x509 package. (bsc#1236217) * crypto/x509: TLS validation fails for FQDNs with trailing dot go1.24.8 (released 2025-10-07) includes security fixes t…
first Oct 20, 2025 -
High max 7.4SUSE-SU-2025:2169-1 1 CVE
Security update for yelp
This update for yelp fixes the following issues: - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
first Nov 26, 2025 -
High max 9.8SUSE-SU-2025:21224-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
High max 7.1SUSE-SU-2025:21220-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025…
first Dec 16, 2025 -
High max 7.8SUSE-SU-2025:21218-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: salt: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendore…
first Dec 16, 2025 -
High max 7.1SUSE-SU-2025:21217-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025…
first Dec 16, 2025 -
High max 7.8SUSE-SU-2025:21216-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle
This update fixes the following issues: salt: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored tornado…
first Dec 16, 2025 -
High max 9.8SUSE-SU-2025:21213-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
High max 7.8SUSE-SU-2025:21212-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-aft…
first Dec 15, 2025 -
High max 7.5SUSE-SU-2025:21211-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash (bsc#1252749). - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362). - C…
first Dec 15, 2025 -
High max 7.5SUSE-SU-2025:21200-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference (bsc#1253177). - CVE-2025-62689: Fixed heap-based buffer overflow(bsc#1253178).
first Dec 9, 2025 -
High max 7.5SUSE-SU-2025:21192-1 13 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.5. Security issues fixed: - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host certificate validation (bsc#1254431). - CVE-2025-61727: crypto/x509: …
first Dec 12, 2025 -
High max 7.5SUSE-SU-2025:21168-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-64076: Fixed bug in decode_definite_long_string() that causes incorrect chunk length calculation (bsc#1253746). Already fixed in release 5.6.3: - CVE-2024-26134: Fixed potential crash when ha…
first Dec 2, 2025 -
High max 8.1SUSE-SU-2025:21167-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).
first Dec 2, 2025 -
High max 7.5SUSE-SU-2025:21164-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-53057: Fixed enhance certificate handling (bsc#1252414). Other bug …
first Nov 28, 2025 -
High max 7.4SUSE-SU-2025:21159-1 1 CVE
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled (bsc#1252839) - Changes - auth: Remove proxy_always field. - config: Change settings history …
first Nov 27, 2025 -
High max 7.5SUSE-SU-2025:21145-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757) - CVE-2025-10148: Fixed predictable WebSocket mask…
first Nov 26, 2025 -
High max 8.4SUSE-SU-2025:21136-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3: * CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252232)
first Nov 20, 2025 -
High max 7.8SUSE-SU-2025:21124-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_12
This update for kernel-livepatch-MICRO-6-0-RT_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21119-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21117-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21114-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_10
This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS UL…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21112-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21110-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21108-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21107-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - CVE…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21102-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_12
This update for kernel-livepatch-MICRO-6-0_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21101-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_11
This update for kernel-livepatch-MICRO-6-0_Update_11 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21097-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_8
This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21096-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21095-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…
first Nov 28, 2025