12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:21092-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - CVE…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21090-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS …
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21087-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 8.8SUSE-SU-2025:21084-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets (bsc…
first Nov 27, 2025 -
High max 7.5SUSE-SU-2025:21077-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757) - CVE-2025-10148: Fixed predictable WebSocket mask…
first Nov 26, 2025 -
High max 8.8SUSE-SU-2025:21066-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets (bsc…
first Nov 26, 2025 -
High max 7.3SUSE-SU-2025:21057-1 2 CVEs
Security update for containerd
This update for containerd fixes the following issues: - CVE-2024-25621: Fixed overly broad default permission vulnerability (bsc#1253126). - CVE-2025-64329: Fixed goroutine leaks can lead to memory exhaustion on the host (bsc#1253132).
first Nov 14, 2025 -
High max 8.4SUSE-SU-2025:21036-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Up…
first Nov 10, 2025 -
High max 7.5SUSE-SU-2025:21028-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: Fixed large dynamic memory allocations via a small document submitted for parsing (bsc#1249584)
first Nov 19, 2025 -
High max 8.8SUSE-SU-2025:21009-1 7 CVEs
Security update for tiff
This update for tiff fixes the following issues: tiff was updated to 4.7.1: * Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove…
first Nov 19, 2025 -
High max 7.5SUSE-SU-2025:21006-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: Fixed large dynamic memory allocations via a small document submitted for parsing (bsc#1249584)
first Nov 19, 2025 -
High max 7.8SUSE-SU-2025:20988-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20982-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20981-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20980-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_8
This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20977-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-20…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20973-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-20…
first Nov 5, 2025 -
High max 8.8SUSE-SU-2025:20971-1 9 CVEs
Security update for tiff
This update for tiff fixes the following issues: - Update to 4.7.1: Security: * CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow() when processing malformed TIFF files (bsc#1247106) * CVE-2025-8176: Fixed heap use-after-free in tools/…
first Nov 6, 2025 -
High max 7.5SUSE-SU-2025:20965-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Ignore invalid date when processing cookies to prevent out-of-bounds read (bsc#1250562).
first Oct 30, 2025 -
High max 7.8SUSE-SU-2025:20960-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE…
first Nov 6, 2025 -
High max 7.8SUSE-SU-2025:20959-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE…
first Nov 6, 2025 -
High max 7.8SUSE-SU-2025:20958-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_11
This update for kernel-livepatch-MICRO-6-0_Update_11 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38678: nf_tables: reject duplicate device on updates (bsc#1249534)
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20957-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20949-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_11
This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207)
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20944-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20946-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-20…
first Nov 5, 2025 -
High max 7.5SUSE-SU-2025:20900-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption (bsc#1250983)
first Oct 24, 2025 -
High max 7.5SUSE-SU-2025:20872-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption (bsc#1250983)
first Oct 23, 2025 -
High max 9.8SUSE-SU-2025:20867-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - Disable LTO for userspace livepatching [jsc#PED-13245]
first Oct 20, 2025 -
High max 7.8
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (bsc#1250692): Please refer to the Release Notes at: https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular cha…
first Oct 17, 2025 -
High max 8.8SUSE-SU-2025:20863-1 25 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591) - Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140) - Update the patch to fix "SRK not matched" errors when unsealing the ke…
first Oct 17, 2025 -
High max 7.8
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (bsc#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…
first Oct 17, 2025 -
High max 7.8SUSE-SU-2025:20842-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_10
This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315)
first Oct 7, 2025 -
High max 8.5SUSE-SU-2025:20801-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502)
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:20791-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_10
This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499) - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() …
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20790-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-38181: calipso: fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001) - C…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20789-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20786-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20785-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…
first Sep 23, 2025 -
High max 8.1SUSE-SU-2025:20782-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…
first Sep 11, 2025